{"id":6943,"date":"2023-07-18T21:38:27","date_gmt":"2023-07-18T21:38:27","guid":{"rendered":"https:\/\/rax-stg-wp-aws.com\/blogs\/rackspace-response-to-july-2023-microsoft-patch-tuesday-security-advisory\/"},"modified":"2026-11-03T19:27:18","modified_gmt":"2026-11-03T19:27:18","slug":"rackspace-response-to-july-2023-microsoft-patch-tuesday-security-advisory","status":"publish","type":"blogs","link":"https:\/\/www.rackspace.com\/en-gb\/blogs\/rackspace-response-to-july-2023-microsoft-patch-tuesday-security-advisory\/","title":{"rendered":"Rackspace Response to July 2023 Microsoft Patch Tuesday Security Advisory"},"content":{"rendered":"<p>On 11 July 2023, Microsoft declared 132 vulnerabilities, including 6 actively exploited Zero-Day and 9 critical vulnerabilities. Microsoft has released patches for all vulnerabilities except one Zero-Day (<a href=\"https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2023-36884\">CVE-2023-36884<\/a>). This vulnerability impacts how Microsoft Office handles MSHTML files \u2013 Rackspace recommends patching <a href=\"https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2023-36884\">CVE-2023-36884<\/a> when a patch is eventually released. Please note that Microsoft has not indicated if this vulnerability will be patched individually or included with the August patch release. Of the vulnerabilities noted by Microsoft, Rackspace will highlight five in this post.&nbsp;&nbsp;<\/p>\n<p>Three vulnerabilities (tracked as <a href=\"https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2023-35365\">CVE-2023-35365<\/a>, <a href=\"https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2023-35366\">CVE-2023-35366<\/a>, and <a href=\"https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2023-35367\">CVE-2023-35367<\/a>) impact the \u201cRouting and Remote Access service\u201d (RRAS) on all current versions of Windows Server, as well as v2008. These vulnerabilities result in Remote Code Execution (RCE), do not require authentication or user interaction, and have a low attack complexity. Fortunately, RRAS is not installed or configured by default on Windows Servers. We recommend that customers evaluate whether this service is or could be enabled, and either disable the service, or patch it to mitigate the vulnerability.&nbsp;&nbsp;<\/p>\n<p>The fourth vulnerability (tracked as <a href=\"https:\/\/msrc.microsoft.com\/update-guide\/en-US\/vulnerability\/CVE-2023-32057\">CVE-2023-32057<\/a>) affects Microsoft Message Queuing (MSMQ) with a CVSS of 9.8 (rated \u201ccritical\u201d). To successfully exploit this vulnerability, an attacker must send a specifically crafted malicious MSMQ packet to a MSMQ server, leading to a remote code execution. This Windows component must be enabled for a system to be vulnerable. Microsoft recommends checking if \u201cMessage Queuing\u201d service is running and TCP port 1801 is listening on the machine.&nbsp;<\/p>\n<p>The final vulnerability (tracked as <a href=\"https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2023-35352\">CVE-2023-35352<\/a>) exists within the Remote Desktop Protocol (RDP). Exploiting this vulnerability would allow an attacker to bypass authentication using certificates or private keys when initiating a remote desktop session. The vulnerability impacts Windows Servers versions 2012 to 2019 and has a low attack complexity rating.&nbsp;&nbsp;<\/p>\n<p>Rackspace engineers have performed an initial assessment and strongly recommend that customers review the advisories and ensure appropriate patches are installed. Rackspace customers using our Managed Patching Service will be patched during normal patching cycles.&nbsp;<\/p>\n<p>For those customers not using Rackspace Managed Patching, we recommend patching devices as soon as possible to mitigate these vulnerabilities. Customers not using our Managed Patching Service can install the latest Windows Updates themselves or can request that Rackspace perform patching by contacting Rackspace Support.&nbsp;<\/p>\n<p>Our security teams are actively monitoring the situation and will provide any associated updates via this blog.&nbsp;<\/p>\n<p>Should you have any questions or require assistance in responding to these vulnerabilities, please contact a support Racker via <a href=\"https:\/\/www.rackspace.com\/login\">https:\/\/www.rackspace.com\/login<\/a>.&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Rackspace Response to July 2023 Microsoft Patch Tuesday Security Advisory<\/p>\n","protected":false},"author":2,"featured_media":6945,"menu_order":0,"comment_status":"open","ping_status":"open","template":"","format":"standard","meta":{"content-type":"","nid":"25744","content_type":"blog","created_by":"10891","authored_on":"2023-07-18T21:38:27+00:00","field_article_industries":"","tag_category":"Technical","field_blog_author_text":"by Marc Nourani Director, Global Service Operations, Rackspace Technology","seo_description":"Read Rackspace's response to July 2023 Microsoft Patch. Understand recommended actions.\r\n","field_featured_image":"","insights_image":"\/wp-content\/uploads\/2026\/blog_technical_images\/25744-insights_image-how-to-technical-blog-1-insights.jpg","field_partners":"","rxt_platforms":"Security","product":"","publisheddate":"2023-07-18T21:38:27","rxt_solutions":"Security","opengraph_tag":"","x_tag":"","teaser_flag":"Technical Blog","seo_titile":"Rackspace Response to July 2023 Microsoft Patch Tuesday Security Advisory","field_topics":"","field_slug":"Rackspace Response July 2023 Microsoft Patch","footnotes":""},"categories":[178],"tags":[204],"class_list":["post-6943","blogs","type-blogs","status-publish","format-standard","has-post-thumbnail","hentry","category-blog","tag-technical"],"_links":{"self":[{"href":"https:\/\/www.rackspace.com\/en-gb\/wp-json\/wp\/v2\/blogs\/6943","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.rackspace.com\/en-gb\/wp-json\/wp\/v2\/blogs"}],"about":[{"href":"https:\/\/www.rackspace.com\/en-gb\/wp-json\/wp\/v2\/types\/blogs"}],"author":[{"embeddable":true,"href":"https:\/\/www.rackspace.com\/en-gb\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.rackspace.com\/en-gb\/wp-json\/wp\/v2\/comments?post=6943"}],"version-history":[{"count":1,"href":"https:\/\/www.rackspace.com\/en-gb\/wp-json\/wp\/v2\/blogs\/6943\/revisions"}],"predecessor-version":[{"id":6944,"href":"https:\/\/www.rackspace.com\/en-gb\/wp-json\/wp\/v2\/blogs\/6943\/revisions\/6944"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.rackspace.com\/en-gb\/wp-json\/wp\/v2\/media\/6945"}],"wp:attachment":[{"href":"https:\/\/www.rackspace.com\/en-gb\/wp-json\/wp\/v2\/media?parent=6943"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.rackspace.com\/en-gb\/wp-json\/wp\/v2\/categories?post=6943"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.rackspace.com\/en-gb\/wp-json\/wp\/v2\/tags?post=6943"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}