Security News > 2023 > July > A Few More Reasons Why RDP is Insecure (Surprise!)

In the intervening decades, RDP has become a widely used protocol for remote access and administration of Windows-based systems.

The downside of RDP's widespread use is that a Remote Code Execution vulnerability in an RDP gateway can have severe consequences, potentially leading to significant damage and compromising the security and integrity of the affected system.

From an attacker's point of view, exploiting an RCE vulnerability is a way to achieve unauthorized access to the affected system, allowing them to gain control over the system, bypass security measures, and perform malicious actions that could include lateral movement, data exfiltration, malware deployment, system disruption, and more.

Still, given the potential for unauthorized access, data breaches, and systems compromise, RCE vulnerabilities in RDP are considered a critical security concern that require immediate attention and mitigation.

Under normal operation, the RDP Gateway protocol creates a primary secure channel using the Transport Control Protocol and Transport Layer Security version 1.2, a widely accepted protocol for secure communication.

Because RDP is widely used in OT/ICS environments that are all but impossible to patch, it's especially important that organizations running these systems find security tools that meet their special requirements regarding systems availability, operational safety, and more.

News URL

https://thehackernews.com/2023/07/a-few-more-reasons-why-rdp-is-insecure.html