Windows Server 2012 has a large number of remote administration options that present general potential for misuse. Forms of remote access such as RDP user sessions may be available to third parties due to insecure or insecurely used protocols, weak authentication (e.g. weak passwords), or incorrect configuration. As a consequence, a server and the information it houses may be compromised to a critical extent. Additional IT systems connected to the server can also be compromised this way.
- BSI -
Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)