Microsoft will be enabling some DCOM protocol hardening changes by default with next month’s Patch Tuesday. This may result in interoperability issues between networked client and server devices.
Back in June 2021, Microsoft revealed detailed about the CVE-2021-26414 vulnerability that could exploit the Distributed Component Object Model (DCOM) remote protocol. For those unaware, DCOM leverages remote procedure calls (RPCs) to expose application components to facilitate communication between networked devices. Since the disclosure of this vulnerability, Microsoft has been making changes to DCOM in order to harden it, and the company has now issued a reminder that these configuration modifications will become mandatory in less than a month.
