, 6 tweets, 4 min read Read on Twitter
New Unpatched Bug Could Allow Client-Side Attackers to Bypass #Windows Lock Screen On RDP Sessions

Read more — thehackernews.com/2019/06/rdp-wi…

All the attacker needs to do is… interrupt the network connectivity of a targeted client system and Tadaaaa...! the lock screen will disappear
Starting with Windows 10 1803 and #Windows Server 2019, this flaw exists when login over #RDP requires the clients to authenticate with Network Level Authentication, an option that #Microsoft recently recommended as a workaround against the critical #BlueKeep RDP vulnerability.

"Two-factor authentication systems that integrate with the Windows login screen, such as Duo Security MFA, are also bypassed using this mechanism. Any login banners enforced by an organization will also be bypassed." @wdormann confirmed.
Joe Tammariello, who discovered this issue, notified Microsoft of the #vulnerability on April 19, but the company said the "behavior does not meet the Microsoft Security Servicing Criteria for Windows."


Expect no patch for Lock Screen bypass anytime soon
Client users can protect their RDP sessions against potential exploitation of this vulnerability by simply locking their local system instead of the remote system, or both, while leaving the system unattended and also by disconnecting RDP sessions instead of just locking them.
We have just added a video demonstration for the latest unpatched "Windows Lock Screen bypass on RDP Session" vulnerability (CVE-2019-9510)

Watch >> thehackernews.com/2019/06/rdp-wi…

Video courtesy of @LeandroNVelasco from KPN Security Research Team.
Missing some Tweet in this thread?
You can try to force a refresh.

Like this thread? Get email updates or save it to PDF!

Subscribe to The Hacker News
Profile picture

Get real-time email alerts when new unrolls are available from this author!

This content may be removed anytime!

Twitter may remove this content at anytime, convert it as a PDF, save and print for later use!

Try unrolling a thread yourself!

how to unroll video

1) Follow Thread Reader App on Twitter so you can easily mention us!

2) Go to a Twitter thread (series of Tweets by the same owner) and mention us with a keyword "unroll" @threadreaderapp unroll

You can practice here first or read more on our help page!

Follow Us on Twitter!

Did Thread Reader help you today?

Support us! We are indie developers!

This site is made by just three indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3.00/month or $30.00/year) and get exclusive features!

Become Premium

Too expensive? Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal Become our Patreon

Thank you for your support!