Notice on Suspending Remote Desktop Services for Some Users Who Have Not Updated the BlueKeep Security Patch
Published: 2019-09-10
Beijing time May 15, Microsoft released a fix for the remote code execution vulnerability CVE-2019-0708 in Remote Desktop Services; the vulnerability can be triggered without user interaction. This means attackers can exploit this vulnerability to create WannaCry-like worm viruses similar to the one that swept the globe in 2017, for large-scale spread and destruction.
After verification by our company's technical staff, the vulnerability is extremely high-risk. For users who have not successfully installed the security patch, hackers can exploit this vulnerability to easily log in to the server, create accounts, and delete data, with extremely serious impact. Click to view details. In response to this situation, our company will suspend Remote Desktop connections for users who have not successfully installed this security patch, so as to ensure the security of user data.
If users find that they cannot connect remotely, or receive an email notification, or are users who have not installed this security patch, please handle it through the following steps:
1. Install security patch:
Log in to the Management Center - Business Management - Server Management, click the Manage button for the corresponding server, and in 【System Management】 - WEB Console】 click the Manage button to enter the console.

Enable Windows Update automatic updates, and install all Windows patches, then restart the server.
2. Enable permission for Remote Desktop Services:
A: Click to enterSecurity Group Enter the IP to find the corresponding security group

Find the security group rule named “RDP_SFC”, and click “Deploy”

Remove this IP from the deployed IPs

B:
For cloud servers that have deployed a security group, please click Security Group > Rules, and delete the two rules 33890 and 3389,

If the server cannot be accessed remotely due to restrictions, you can use the Console to view the server and update system patches. After the update is complete, then cancel the deployment of the security group
```