New Release Brings BlueKeep to Metasploit

An exploit for BlueKeep, a vulnerability in Microsoft's Remote Desktop Protocol (RDP) that can allow remote code execution, is the subject of the latest pull request of Metasploit, the open source exploit framework widely used by security researchers.

BlueKeep, designated CVE-2019-0708, affects Windows versions from 2000 through Server 2008 R2 and Windows 7. A related vulnerability, DejaBlue, is present in these versions as well as newer Windows versions through Windows 10.

A blog post at Rapid7, the security company that maintains Metasploit in conjunction with the open source community, notes that RDP attacks went up dramatically following the initial BlueKeep release, though the overall level of such activity is below what it initially expected. The company suggests that all organizations with Windows infrastructures make sure their systems are patched to current versions.

The BlueKeep exploit module for Metasploit is available on GitHub.

For more, read here.

Check out The Edge, Dark Reading's new section for features, threat data, and in-depth perspectives. Today's top story: "Phishers' Latest Tricks for Reeling in New Victims."