Lucene search

K
cisaCISACISA:4F4185688CEB9B9416A98FE75E7AFE02
HistoryJul 13, 2021 - 12:00 a.m.

CISA Issues Emergency Directive on Microsoft Windows Print Spooler

2021-07-1300:00:00
us-cert.cisa.gov
130
cisa
emergency directive
windows print spooler
cve-2021-34527
microsoft july 2021 updates
active directory.

EPSS

0.967

Percentile

99.7%

CISA has issued Emergency Directive (ED) 21-04: Mitigate Windows Print Spooler Service Vulnerability addressing CVE-2021-34527. Attackers can exploit this vulnerability to remotely execute code with system level privileges enabling a threat actor to quickly compromise the entire identity infrastructure of a targeted organization.

Specifically, ED 21-04 directs federal departments and agencies to immediately apply the Microsoft July 2021 updates and disable the print spooler service on servers on Microsoft Active Directory (AD) Domain Controllers (DCs).

Although ED 21-04 applies to Executive Branch departments and agencies, CISA strongly recommends that state and local governments, private sector organizations, and others review ED 21-04: Mitigate Windows Print Spooler Service Vulnerability for additional mitigation recommendations.

This product is provided subject to this Notification and this Privacy & Use policy.

Please share your thoughts.

We recently updated our anonymous product survey; we’d welcome your feedback.