Security Information: Remote desktop service vulnerability (CVE-2019-0708)
Canon Medical Systems Security Advisory
Overview
It was announced that there is a security vulnerability in the Remote Desktop Service (software for remote control from other computers) in the Windows OS. And there is a possibility that an attacker who successfully exploited this vulnerability could install software, view data, change data, or delete data. At this time, no attack code or attack damage that exploits this vulnerability has been confirmed.
Security Risk Evaluation Result
The evaluation results of Common Vulnerability Scoring System (CVSS) is 9.8 (critical level) and the degree of impact on confidentiality, integrity, and availability is also rated as “high”. The attack method is as simple as sending a specially crafted RDP request to the remote desktop service of the target system.
Affected product
Resolution
Canon Medical Systems Corporation will provide the Microsoft update for the following systems.
Canon Medical Systems Corporation will provide risk mitigation measures for the following systems.
For inquiries concerning these subject products, please contact the nearest branch office, sales/service office.
Notes
It is known the followings as countermeasures for your network to reduce the possibility of security incident by this security vulnerability.
1) Control of communication protocol and communication port
TThe attack on the remote desktop service uses the following communication protocol and communication port. As one measure, it is valid to control not to allow those remote desktop service communication to our device. Alternatively, it is effective to change the communication port to something other than the default communication port.
| Service Name | Protocol type and used port number |
| TermService | TCP 3389 port |
Social Media
