title

QueueJumper: Critical Unauthenticated RCE Vulnerability in MSMQ Service - Check Point Research

content-type

text/html

description

Latest Research by our Team

X-UA-Compatible

IE=edge

viewport

width=device-width, initial-scale=1

og:locale

en_US

og:type

article

og:title

QueueJumper: Critical Unauthorized RCE Vulnerability in MSMQ Service

og:description

Check Point Research recently discovered three vulnerabilities in the "Microsoft Message Queuing" service, commonly known as MSMQ. These vulnerabilities were disclosed to Microsoft and patched in the April Patch Tuesday update. The most severe of these, dubbed QueueJumper by CPR (CVE-2023-21554), is a critical vulnerability that could allow unauthorized attackers to remotely execute arbitrary code in the context of the Windows service process mqsvc.exe.

og:url

https://research.checkpoint.com/2023/queuejumper-critical-unauthorized-rce-vulnerability-in-msmq-service/

twitter:card

summary_large_image

twitter:title

QueueJumper: Critical Unauthorized RCE Vulnerability in MSMQ Service

twitter:description

Check Point Research recently discovered three vulnerabilities in the "Microsoft Message Queuing" service, commonly known as MSMQ. These vulnerabilities were disclosed to Microsoft and patched in the April Patch Tuesday update. The most severe of these, dubbed QueueJumper by CPR (CVE-2023-21554), is a critical vulnerability that could allow unauthorized attackers to remotely execute arbitrary code in the context of the Windows service process mqsvc.exe.

twitter:image

https://research.checkpoint.com/wp-content/uploads/2023/04/msmq_cover_v1.png

twitter:creator

@_cpresearch_

alternate

https://research.checkpoint.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fresearch.checkpoint.com%2F2023%2Fqueuejumper-critical-unauthorized-rce-vulnerability-in-msmq-service%2F

alternate

https://research.checkpoint.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fresearch.checkpoint.com%2F2023%2Fqueuejumper-critical-unauthorized-rce-vulnerability-in-msmq-service%2F&format=xml

apple-touch-icon

https://research.checkpoint.com/wp-content/uploads/2022/10/cropped-pavicon_CPR-03-e1666694691376-180x180.png

canonical

https://research.checkpoint.com/2023/queuejumper-critical-unauthorized-rce-vulnerability-in-msmq-service/

icon

https://research.checkpoint.com/wp-content/uploads/2022/10/cropped-pavicon_CPR-03-e1666694691376-32x32.png