Critical Security Update for Windows Rackmount Streamboxes

Critical Security Update for Windows-based Rackmount Streamboxes and Servers

Microsoft has issued an update for both in-support and out-of-support Windows operating systems, to resolve a newly discovered vulnerability,†CVE-2019-0708, which could allow an outside user to remote into the windows-based Streamboxes.

Streambox has sold rackmounted Encoders and Decoders, such as the 9200, 9300, and 9400, which use Windows XP Embedded and Windows Standard 7 Embedded.† Furthermore, Windows servers such as the Streambox Enterprise Server and the legacy products Distribution Server and Store & Forward Server, should be updated as soon as possible.

In the case of Encoders and Decoders, it may be necessary to first disable the File-Based Write Filter, a write-protection system which will prevent the Microsoft Patch from installing correctly. See this related article to determine if the FBWF must be disabled. The FBWF may be re-enabled after the install is complete (including reboot).
†

• Windows XP Embedded encoders and decoders:†Windows XP Update† (519KB) For additional information, see† Microsoft Advisory KB4500331
• Windows Standard 7 Embedded encoders and decoders: Windows 7 Update (174.4MB) This patch is much large as it's the 2019-05 Security Monthly Quality Rollup for Windows Embedded Standard 7 (Advisory KB4499164)† All available Windows Updates for Windows 7 should be run, if and when possible.
• Windows Server 2003, consult this page for the patch release.†
• Windows Server 2008 or 2012 (any version), you can use Windows Update to get the latest May 2019 security roll-up, or consult this page for the required patch.† We recommend running all available updates.

Please update your Windows-based Streamboxes as soon as possible, particularly if the Streamboxes are have a public Internet IP address or are not protected from intrusion by a firewall.

And again, be sure to re-enable the FBWF Write Protection system described above once the patching process, including reboot, is complete, if you intend to make use its protection.