Conversation

Notices

1. Embed this notice
   Jake Hildreth (acorn) :blacker_heart_outline: (horse@infosec.exchange)'s status on Thursday, 15-Dec-2022 21:27:54 JST Jake Hildreth (acorn) :blacker_heart_outline:

   • Mat DJ 🐶 :verified_paw: :donor:

   @shibashecurity Np! Need any of these other OSes tested?

   - Win 7
   - Win 10
   - Server 2008R2
   - Server 2012
   - Server 2016

   • Embed this notice
     Jake Hildreth (acorn) :blacker_heart_outline: (horse@infosec.exchange)'s status on Thursday, 15-Dec-2022 19:59:40 JST Jake Hildreth (acorn) :blacker_heart_outline:

     in reply to

     • Mat DJ 🐶 :verified_paw: :donor:

     @shibashecurity I can test the hub removal question in a bit when the coffee takes hold.

   • Embed this notice
     Mat DJ 🐶 :verified_paw: :donor: (shibashecurity@infosec.exchange)'s status on Thursday, 15-Dec-2022 19:59:42 JST Mat DJ 🐶 :verified_paw: :donor:

     Just looking at this CVSS 9.3 about #VMware #ESXi

     https://www.vmware.com/security/advisories/VMSA-2022-0033.html

     Is it worth breaking the Christmas change freeze by classing this as an emergency change? It is a 9.3 after all.

     I can't see any evidence of any proof on concept. I can see there's the workaround of removing the USB controller, but I've yet to find out if this is going to involve reboots on Windows servers. I know I can easily test it, and I'll get there a bit later this afternoon.

     In the meantime, if any of you have any answers to these questions, I'd be most grateful:

     - Do you know if there's a public PoC?

     - Do you know if removing the USB 2.0 controller needs a reboot?

   • Embed this notice
     Jake Hildreth (acorn) :blacker_heart_outline: (horse@infosec.exchange)'s status on Thursday, 15-Dec-2022 20:11:27 JST Jake Hildreth (acorn) :blacker_heart_outline:

     in reply to

     • Mat DJ 🐶 :verified_paw: :donor:

     @shibashecurity No reboot required for Server 2019 on vSphere 7.0 + ESXi 6.7.

   • Embed this notice
     Mat DJ 🐶 :verified_paw: :donor: (shibashecurity@infosec.exchange)'s status on Thursday, 15-Dec-2022 23:59:04 JST Mat DJ 🐶 :verified_paw: :donor:

     in reply to

     @horse Nah, no need, that'll do nicely! Thank you very much for your help there, saved me some faffing about

   • Embed this notice
     Jake Hildreth (acorn) :blacker_heart_outline: (horse@infosec.exchange)'s status on Friday, 16-Dec-2022 00:25:07 JST Jake Hildreth (acorn) :blacker_heart_outline:

     in reply to

     • Mat DJ 🐶 :verified_paw: :donor:

     @shibashecurity Always glad to help!