ICS Impact from Microsoft RDP Vulnerability

Microsoft published an advisory for CVE-2019-0708 (BlueKeep), a wormable Remote Desktop Services vulnerability allowing unauthenticated kernel memory corruption and potential SYSTEM-level remote code execution; it affects older Windows versions (Windows 7/Server 2008 R2, Server 2008, 2003, XP) commonly found in ICS environments. Proof-of-concept exists, Microsoft released patches (including for EOL systems), and operators are urged to test and deploy patches—especially on DMZ jump boxes—because legacy ICS systems often delay updates and are at increased risk of large-scale wormable or ransomware outbreaks.