Security firm Immunity has developed a working BlueKeep exploit module and added it to an automated exploitation platform, raising concerns that threat actors may be able to use the tool to recreate WannaCry scale attacks.
The product is available for what some are describing as an “expensive” monthly rate and was released because “it’s important for organizations to understand their actual risk and determine if their defenses are effectively protecting them,” Dave Aitel, CTI at Immunity’s parent company, Cyxtera, told ThreatPost.
When questioned about the need of a full RCE exploit in the tool rather than just a scanner to find vulnerable systems, Aitel said that testing these kinds of systems requires a working RCE exploit to address the entirety of risk rather than focusing on any single exploit.
Despite patches for the vulnerability being out since May 2019, approximately 805,665 systems remain vulnerable to BlueKeep, according to a recent status update from the firm – down from one million in May.
