Over the past couple of months, there has been an increasing amount of discussion surrounding a privilege escalation bug found in the print spooler service on several Windows platforms.
Named PrintNightmare, the issue was believed to allow users with existing authentication to escalate their privileges, allowing them to override admin rights, furthermore, exposing the vulnerabilities of the platform to remote code execution.
The issue first came to the surface in early June 2021 when Microsoft patched the vulnerability in the print spooler (CVE-2021-1675). However, later in the month things seemed to escalate further, with the confirmation that the patch had not been successful in remedying the issue.
Despite the best efforts of Microsoft, it is thought that PrintNightmare is still an issue for Windows 10 to this day.
Microsoft explains the issue, which is labelled CVE-2021-36958:
“A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
The workaround for this vulnerability is stopping and disabling the Print Spooler service.“
While this is something Windows are working hard to resolve, it is uncertain when they will regain control of this issue.
How do Zunoma avoid security print issues
Using any platform for data protection has its risks. By continually investing in new technology, we ensure that we are not only optimising opportunities for efficiency in our services but reducing service delivery costs and simultaneously increasing security.
Our digital transformations have offered customers and clients the opportunity to enjoy print solutions in a secure digital environment with the benefits of numerous data protection systems to maximise the security of their confidential information.
Steve Hancock, IT Director at Zunoma, said:
“Using secure printing technology is vital. When sensitive and mission-critical documents are sent to desktop printers, shared office printers, or a specialist high volume security printer like us, it is imperative that you feel confident that the print is adequately protected, both digitally and physically.
“At Zunoma we are the guardians of your documents and through innovation, investment and continuous improvement, your documents are safe in our hands.”
Some tips for improving the security of your online data:
• Research, install and keep your antivirus apps updated
• Use two-factor authentication where possible
• Create unique passwords for every platform
• Protect your privacy on social media platforms