BNMC Blog

Bredy Network Management Corporation (BNMC) has been serving the Northeast area since 1988. BNMC works as a strategic business partner to provide organizations with proven design, implementation and support solutions.

BNMC Cybersecurity update: Microsoft PrintNightmare Emergency Security Patch

BNMC Blog

Roger Michelson

Wednesday, 07 July 2021

BNMC is in the process of rolling out an emergency Microsoft Windows server security patch to all of our customers in response to address a critical flaw in the Windows Print Spooler service. The vulnerability, dubbed PrintNightmare, was revealed last week, after security researchers accidentally published proof-of-concept (PoC) exploit code. Microsoft has issued out-of-band security updates to address the flaw, and has rated it as critical as attackers can remotely execute code with system-level privileges on affected machines.

BNMC normally schedules all server patches during the customized maintenance window defined by each customer. But, this security patch has a critical rating and needs to be applied ASAP. As the Print Spooler service runs by default on Windows, Microsoft has had to issue patches for Windows Server 2019, Windows Server 2012 R2, Windows Server 2008, Windows 8.1, Windows RT 8.1, and a variety of supported versions of Windows 10. Microsoft has even taken the unusual step of issuing patches for Windows 7, which officially went out of support last year. Microsoft has not yet issued patches for Windows Server 2012, Windows Server 2016, and Windows 10 Version 1607, though. Microsoft says “security updates for these versions of Windows will be released soon.”

It took Microsoft a couple of days to issue an alert about a 0-day affecting all supported versions of Windows. The PrintNightmare vulnerability allows attackers to use remote code execution, so bad actors could potentially install programs, modify data, and create new accounts with full admin rights.

“We recommend that you install these updates immediately,” says Microsoft. “The security updates released on and after July 6, 2021 contain protections for CVE-2021-1675 and the additional remote code execution exploit in the Windows Print Spooler service known as ‘PrintNightmare’, documented in CVE-2021-34527.”.

Tags:

Windows PrintNightmare Microsoft Security Patch

About the author

Roger Michelson

VP, Chief Operations Officer and co-owner of BNMC with 24+ years of experience developing and managing technical solutions and operations to drive growth and profitability in the IT services industry.

Author's recent posts

BNMC Blog

BNMC Cybersecurity update: Microsoft PrintNightmare Emergency Security Patch

Customer Login