Notice on Suspending Remote Desktop Services for Some Users Who Have Not Updated the BlueKeep Security Patch

Published: 2019-09-10

```html

Beijing time May 15, Microsoft released a fix for the remote code execution vulnerability CVE-2019-0708 in Remote Desktop Services; the vulnerability can be triggered without user interaction. This means attackers can exploit this vulnerability to create WannaCry-like worm viruses similar to the one that swept the globe in 2017, for large-scale spread and destruction.

After verification by our company's technical staff, the vulnerability is extremely high-risk. For users who have not successfully installed the security patch, hackers can exploit this vulnerability to easily log in to the server, create accounts, and delete data, with extremely serious impact. Click to view details. In response to this situation, our company will suspend Remote Desktop connections for users who have not successfully installed this security patch, so as to ensure the security of user data.


If users find that they cannot connect remotely, or receive an email notification, or are users who have not installed this security patch, please handle it through the following steps:

1. Install security patch:

Log in to the Management Center - Business Management - Server Management, click the Manage button for the corresponding server, and in 【System Management】 -  WEB Console】 click the Manage button to enter the console.

image.png

Enable Windows Update automatic updates, and install all Windows patches, then restart the server.


2. Enable permission for Remote Desktop Services:

A: Click to enterSecurity Group  Enter the IP to find the corresponding security group

image.png

Find the security group rule named “RDP_SFC”, and click “Deploy”

image.png


Remove this IP from the deployed IPs

image.png



B:

For cloud servers that have deployed a security group, please click Security Group > Rules, and delete the two rules 33890 and 3389,

image.png


If the server cannot be accessed remotely due to restrictions, you can use the Console to view the server and update system patches. After the update is complete, then cancel the deployment of the security group 

```