丁香园AV

Microsoft printing software security vulnerability CVE-2021-34527

What happened?

Microsoft announced a critical security vulnerability in printing called 鈥淧rintNightmare鈥�. This is a widespread Microsoft issue that is being managed by all organizations that use the Microsoft operating system.

To protect 丁香园AV information and systems, IT Services temporarily disabled printing at 丁香园AV on July 2, 2021.

Who was impacted?

Notifications and updates are being sent to the 丁香园AV faculty and staff. 丁香园AV Print services are currently unavailable for all faculty, staff and students.

What steps should you take?

Microsoft has released updates to address the security vulnerability. Clients with 丁香园AV managed devices will be prompted to apply the updates immediately. This may require multiple restarts.

What can I do to protect my personal (Windows) device?

Cybercriminals are more likely to target large institutions than individual users. Microsoft recommends regularly updating Windows. By default Windows 10 is configured with Automatic Updates. The patch released on July 6, 2021, addresses the most recent exploit. The following steps will be automated for 丁香园AV Managed devices.

To verify that your device has received this patch, you should (Source: Rutgers University)

• Open Settings by pressing Start and the Gear icon
• Navigate to Update & Security
• View update history
• Verify KB5004946 is installed
• If it does not show as installed鈥�
  • Exit View History
  • Click Check for Updates

Note: Ignore this step if you had not previously disabled print spooler.  After verifying the patch is installed, please follow the instructions below to re-enable the print spooler. To enable the print spooler:

• Search the Start Menu for 鈥渟ervices鈥�
• Right-click the Services app and click Run as Administrator
• Locate the Print Spooler service
• Double click it to open its properties
• Change the Startup Type from Disabled to Automatic and click Apply
• Please start the service or reboot your system to complete this change