![\"broken](\"https:\/\/becolve.com\/wp-content\/uploads\/2023\/04\/parche-DCOM.jpeg\")
<\/p>\n[et_pb_section fb_built=”1″ _builder_version=”4.16″ da_disable_devices=”off|off|off” global_colors_info=”{}” da_is_popup=”off” da_exit_intent=”off” da_has_close=”on” da_alt_close=”off” da_dark_close=”off” da_not_modal=”on” da_is_singular=”off” da_with_loader=”off” da_has_shadow=”on”][et_pb_row _builder_version=”4.16″ background_size=”initial” background_position=”top_left” background_repeat=”repeat” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.16″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_text _builder_version=”4.19.5″ background_size=”initial” background_position=”top_left” background_repeat=”repeat” global_colors_info=”{}”]<\/p>\n
<\/p>\n
In Microsoft’s cumulative updates<\/strong> of last June 2021, a security patch was included to limit the exposure of CVE-2021-26414 with CVSS of 4.3 where a potential attacker could bypass the security options implemented in DCOM. The patch is KB5004442.<\/strong> <\/p>\n This patch had a series of stages to facilitate the updating of all types of systems:<\/p>\n As of March 2023,<\/strong> this patch increases the level of security required for DCOM communications<\/strong> without the possibility of being disabled. Recall that DCOM (Distributed Component Object Model) is a protocol used to expose the objects of an application to RPCs (Remote Procedure Calls) and, in this way, the different components of devices can communicate over the network. <\/p>\n All applications that use the Windows API to establish DCOM connections<\/strong> between two devices are affected. An example: OPC-DA. <\/p>\n Classic OPC-DA<\/strong> uses DCOM communications<\/strong> to pass information between devices. The application of this patch, as of March 14, 2023, impacts all OPC-DA communication since clients and servers must use the same DCOM authentication level. <\/p>\n The connection between OPC DA servers and clients<\/strong> through a network requires DCOM. With the mandatory application of the Microsoft security patch KB5004442,<\/strong> only the two highest levels of DCOM authorization will be allowed. Any connection from OPC clients with lower security configurations will fail. <\/p>\n In general, the best solution is to update the applications to their latest version<\/strong>. Not only to avoid being affected by the Microsoft KB5004442 patch, but also to guarantee the maximum level of security of your systems. <\/p>\n If it is not possible to update to the latest version available<\/strong>, please contact our technical support department and they will advise you on the best option for your specific case.<\/p>\n In a generic way, if we talk about communications through OPC DA,<\/strong> we can consider the following solutions:<\/p>\n Don’t know how to apply any of these points? Or, even worse, don’t you even know where you are? <\/strong> Don’t worry, at Becolve Digital we are clear on how to help you, get in touch with us and we will study your particular case.<\/p>\n [\/et_pb_text][et_pb_button button_url=”https:\/\/promo.logitek.es\/webinar-ultima-actualizacion-de-dcom-como-te-afecta\/” button_text=”Sign up for the webinar!” button_alignment=”center” _builder_version=”4.19.5″ _module_preset=”default” custom_button=”on” button_text_size=”16px” button_text_color=”#FFFFFF” button_bg_color=”#000000″ button_border_radius=”93px” background_layout=”dark” global_colors_info=”{}”][\/et_pb_button][et_pb_button button_url=”https:\/\/becolve.com\/en\/” button_text=”Contact Becolve Digital” button_alignment=”center” _builder_version=”4.19.5″ _module_preset=”default” custom_button=”on” button_text_size=”16px” button_text_color=”#FFFFFF” button_bg_color=”#000000″ button_border_radius=”93px” background_layout=”dark” global_colors_info=”{}”][\/et_pb_button][\/et_pb_column][\/et_pb_row][\/et_pb_section]<\/p>\n","protected":false},"excerpt":{"rendered":" All applications that use the Windows API to establish DCOM connections between two devices are affected.<\/p>\n","protected":false},"author":31,"featured_media":58623,"menu_order":0,"template":"","categories":[],"tags":[],"arquitectura":[],"area":[],"sector":[],"experto":[],"weborigen":[29],"productos-tax":[],"soluciones-tax":[],"marcas-tax":[],"coauthors":[],"class_list":["post-58620","blog","type-blog","status-publish","has-post-thumbnail","hentry","weborigen-logitek-es"],"acf":[],"yoast_head":"\n\n
![\"OPC-DA](\"https:\/\/becolve.com\/wp-content\/uploads\/2023\/04\/OPC-DA.png\")
<\/p>\nAffected Products and Versions<\/h2>\n
\n
Solutions<\/h2>\n
\n
\n
\n