CISA Issues Emergency Directive on Microsoft Print Spooler

Posted by mont on 14 July 2021 Compliance Dental US CERT Vulnerabilities

CISA has issued Emergency Directive (ED) 21-04: Mitigate Windows Print Spooler Service Vulnerability addressing CVE-2021-34527. Attackers can exploit this vulnerability to remotely execute code with system level privileges enabling a threat actor to quickly compromise the entire identity infrastructure of a targeted organization. This directive requires Federal Agencies to comply but HIPAA covered entities like dental offices, should update their server's Group Policy to disable the Print Spooler on all domain controllers for security. Read more