Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-0708

A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop Services Remote Code Execution Vulnerability'.

Published

2019-05-16T19:29:00.427

Last Modified

2025-04-07T18:22:06.710

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

10.0

Impact Score

10.0

Weaknesses

Type: Primary
CWE-416
Type: Secondary
CWE-416

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	microsoft	windows_7	-	Yes
Operating System	microsoft	windows_server_2008	-	Yes
Operating System	microsoft	windows_server_2008	r2	Yes
Operating System	siemens	axiom_multix_m_firmware	*	Yes
Hardware	siemens	axiom_multix_m	-	No
Operating System	siemens	axiom_vertix_md_trauma_firmware	*	Yes
Hardware	siemens	axiom_vertix_md_trauma	-	No
Operating System	siemens	axiom_vertix_solitaire_m_firmware	*	Yes
Hardware	siemens	axiom_vertix_solitaire_m	-	No
Operating System	siemens	mobilett_xp_digital_firmware	*	Yes
Hardware	siemens	mobilett_xp_digital	-	No
Operating System	siemens	multix_pro_acss_p_firmware	*	Yes
Hardware	siemens	multix_pro_acss_p	-	No
Operating System	siemens	multix_pro_p_firmware	*	Yes
Hardware	siemens	multix_pro_p	-	No
Operating System	siemens	multix_pro_firmware	*	Yes
Hardware	siemens	multix_pro	-	No
Operating System	siemens	multix_pro_acss_firmware	*	Yes
Hardware	siemens	multix_pro_acss	-	No
Operating System	siemens	multix_pro_navy_firmware	*	Yes
Hardware	siemens	multix_pro_navy	-	No
Operating System	siemens	multix_swing_firmware	*	Yes
Hardware	siemens	multix_swing	-	No
Operating System	siemens	multix_top_firmware	*	Yes
Hardware	siemens	multix_top	-	No
Operating System	siemens	multix_top_acss_firmware	*	Yes
Hardware	siemens	multix_top_acss	-	No
Operating System	siemens	multix_top_p_firmware	*	Yes
Hardware	siemens	multix_top_p	-	No
Operating System	siemens	multix_top_acss_p_firmware	*	Yes
Hardware	siemens	multix_top_acss_p	-	No
Operating System	siemens	vertix_solitaire_firmware	*	Yes
Hardware	siemens	vertix_solitaire	-	No
Operating System	siemens	atellica_solution_firmware	*	Yes
Hardware	siemens	atellica_solution	-	No
Operating System	siemens	aptio_firmware	*	Yes
Hardware	siemens	aptio	-	No
Operating System	siemens	streamlab_firmware	*	Yes
Hardware	siemens	streamlab	-	No
Operating System	siemens	centralink_firmware	*	Yes
Hardware	siemens	centralink	-	No
Operating System	siemens	viva_e_firmware	*	Yes
Hardware	siemens	viva_e	-	No
Operating System	siemens	viva_twin_firmware	*	Yes
Hardware	siemens	viva_twin	-	No
Application	siemens	syngo_lab_process_manager	*	Yes
Operating System	siemens	rapidpoint_500_firmware	≤ 2.3.2	Yes
Hardware	siemens	rapidpoint_500	-	No
Operating System	siemens	lantis_firmware	*	Yes
Hardware	siemens	lantis	-	No
Operating System	huawei	agile_controller-campus_firmware	v100r002c00	Yes
Operating System	huawei	agile_controller-campus_firmware	v100r002c10	Yes
Hardware	huawei	agile_controller-campus	-	No
Operating System	huawei	bh620_v2_firmware	v100r002c00	Yes
Hardware	huawei	bh620_v2	-	No
Operating System	huawei	bh621_v2_firmware	v100r002c00	Yes
Hardware	huawei	bh621_v2	-	No
Operating System	huawei	bh622_v2_firmware	v100r001c00	Yes
Hardware	huawei	bh622_v2	-	No
Operating System	huawei	bh640_v2_firmware	v100r002c00	Yes
Hardware	huawei	bh640_v2	-	No
Operating System	huawei	ch121_firmware	v100r001c00	Yes
Hardware	huawei	ch121	-	No
Operating System	huawei	ch140_firmware	v100r001c00	Yes
Hardware	huawei	ch140	-	No
Operating System	huawei	ch220_firmware	v100r001c00	Yes
Hardware	huawei	ch220	-	No
Operating System	huawei	ch221_firmware	v100r001c00	Yes
Hardware	huawei	ch221	-	No
Operating System	huawei	ch222_firmware	v100r002c00	Yes
Hardware	huawei	ch222	-	No
Operating System	huawei	ch240_firmware	v100r001c00	Yes
Hardware	huawei	ch240	-	No
Operating System	huawei	ch242_firmware	v100r001c00	Yes
Hardware	huawei	ch242	-	No
Operating System	huawei	ch242_v3_firmware	v100r001c00	Yes
Hardware	huawei	ch242_v3	-	No
Operating System	huawei	e6000_firmware	v100r002c00	Yes
Hardware	huawei	e6000	-	No
Operating System	huawei	e6000_chassis_firmware	v100r001c00	Yes
Hardware	huawei	e6000_chassis	-	No
Operating System	huawei	gtsoftx3000_firmware	v200r001c01spc100	Yes
Operating System	huawei	gtsoftx3000_firmware	v200r002c00spc300	Yes
Operating System	huawei	gtsoftx3000_firmware	v200r002c10spc100	Yes
Hardware	huawei	gtsoftx3000	-	No
Operating System	huawei	oceanstor_18500_firmware	v100r001c30spc300	Yes
Hardware	huawei	oceanstor_18500	-	No
Operating System	huawei	oceanstor_18800_firmware	v100r001c30spc300	Yes
Hardware	huawei	oceanstor_18800	-	No
Operating System	huawei	oceanstor_18800f_firmware	v100r001c30spc300	Yes
Hardware	huawei	oceanstor_18800f	-	No
Operating System	huawei	oceanstor_hvs85t_firmware	v100r001c00	Yes
Operating System	huawei	oceanstor_hvs85t_firmware	v100r001c30spc200	Yes
Hardware	huawei	oceanstor_hvs85t	-	No
Operating System	huawei	oceanstor_hvs88t_firmware	v100r001c00	Yes
Operating System	huawei	oceanstor_hvs88t_firmware	v100r001c30spc200	Yes
Hardware	huawei	oceanstor_hvs88t	-	No
Operating System	huawei	rh1288_v2_firmware	v100r002c00	Yes
Hardware	huawei	rh1288_v2	-	No
Operating System	huawei	rh1288a_v2_firmware	v100r002c00	Yes
Hardware	huawei	rh1288a_v2	-	No
Operating System	huawei	rh2265_v2_firmware	v100r002c00	Yes
Hardware	huawei	rh2265_v2	-	No
Operating System	huawei	rh2268_v2_firmware	v100r002c00	Yes
Hardware	huawei	rh2268_v2	-	No
Operating System	huawei	rh2285_v2_firmware	v100r002c00	Yes
Hardware	huawei	rh2285_v2	-	No
Operating System	huawei	rh2285h_v2_firmware	v100r002c00	Yes
Hardware	huawei	rh2285h_v2	-	No
Operating System	huawei	rh2288_v2_firmware	v100r002c00	Yes
Hardware	huawei	rh2288_v2	-	No
Operating System	huawei	rh2288a_v2_firmware	v100r002c00	Yes
Hardware	huawei	rh2288a_v2	-	No
Operating System	huawei	rh2288e_v2_firmware	v100r002c00	Yes
Hardware	huawei	rh2288e_v2	-	No
Operating System	huawei	rh2288h_v2_firmware	v100r002c00	Yes
Hardware	huawei	rh2288h_v2	-	No
Operating System	huawei	rh2485_v2_firmware	v100r002c00	Yes
Hardware	huawei	rh2485_v2	-	No
Operating System	huawei	rh5885_v2_firmware	v100r001c00	Yes
Hardware	huawei	rh5885_v2	-	No
Operating System	huawei	rh5885_v3_firmware	v100r003c00	Yes
Hardware	huawei	rh5885_v3	-	No
Operating System	huawei	smc2.0_firmware	v500r002c00	Yes
Operating System	huawei	smc2.0_firmware	v600r006c00	Yes
Hardware	huawei	smc2.0	-	No
Operating System	huawei	seco_vsm_firmware	v200r002c00	Yes
Hardware	huawei	seco_vsm	-	No
Operating System	huawei	uma_firmware	v200r001c00	Yes
Operating System	huawei	uma_firmware	v300r001c00	Yes
Hardware	huawei	uma	-	No
Operating System	huawei	x6000_firmware	v100r002c00	Yes
Hardware	huawei	x6000	-	No
Operating System	huawei	x8000_firmware	v100r002c20	Yes
Hardware	huawei	x8000	-	No
Operating System	huawei	elog_firmware	v200r003c10	Yes
Hardware	huawei	elog	-	No
Operating System	huawei	espace_ecs_firmware	v300r001c00	Yes
Hardware	huawei	espace_ecs	-	No

References

http://packetstormsecurity.com/files/153133/Microsoft-Windows-Remote-Desktop-BlueKeep-Denial-Of-Service.html Exploit, Third Party Advisory, VDB Entry ([email protected])
http://packetstormsecurity.com/files/153627/Microsoft-Windows-RDP-BlueKeep-Denial-Of-Service.html Exploit, Third Party Advisory, VDB Entry ([email protected])
http://packetstormsecurity.com/files/154579/BlueKeep-RDP-Remote-Windows-Kernel-Use-After-Free.html Exploit, Third Party Advisory, VDB Entry ([email protected])
http://packetstormsecurity.com/files/155389/Microsoft-Windows-7-x86-BlueKeep-RDP-Use-After-Free.html Third Party Advisory, VDB Entry ([email protected])
http://packetstormsecurity.com/files/162960/Microsoft-RDP-Remote-Code-Execution.html Exploit, Third Party Advisory, VDB Entry ([email protected])
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190529-01-windows-en Third Party Advisory ([email protected])
http://www.huawei.com/en/psirt/security-notices/huawei-sn-20190515-01-windows-en Third Party Advisory ([email protected])
https://cert-portal.siemens.com/productcert/pdf/ssa-166360.pdf Third Party Advisory ([email protected])
https://cert-portal.siemens.com/productcert/pdf/ssa-406175.pdf Third Party Advisory ([email protected])
https://cert-portal.siemens.com/productcert/pdf/ssa-433987.pdf Third Party Advisory ([email protected])
https://cert-portal.siemens.com/productcert/pdf/ssa-616199.pdf Third Party Advisory ([email protected])
https://cert-portal.siemens.com/productcert/pdf/ssa-832947.pdf Third Party Advisory ([email protected])
https://cert-portal.siemens.com/productcert/pdf/ssa-932041.pdf Third Party Advisory ([email protected])
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0708 Patch, Vendor Advisory ([email protected])
http://packetstormsecurity.com/files/153133/Microsoft-Windows-Remote-Desktop-BlueKeep-Denial-Of-Service.html Exploit, Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://packetstormsecurity.com/files/153627/Microsoft-Windows-RDP-BlueKeep-Denial-Of-Service.html Exploit, Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://packetstormsecurity.com/files/154579/BlueKeep-RDP-Remote-Windows-Kernel-Use-After-Free.html Exploit, Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://packetstormsecurity.com/files/155389/Microsoft-Windows-7-x86-BlueKeep-RDP-Use-After-Free.html Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://packetstormsecurity.com/files/162960/Microsoft-RDP-Remote-Code-Execution.html Exploit, Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190529-01-windows-en Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.huawei.com/en/psirt/security-notices/huawei-sn-20190515-01-windows-en Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://cert-portal.siemens.com/productcert/pdf/ssa-166360.pdf Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://cert-portal.siemens.com/productcert/pdf/ssa-406175.pdf Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://cert-portal.siemens.com/productcert/pdf/ssa-433987.pdf Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://cert-portal.siemens.com/productcert/pdf/ssa-616199.pdf Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://cert-portal.siemens.com/productcert/pdf/ssa-832947.pdf Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://cert-portal.siemens.com/productcert/pdf/ssa-932041.pdf Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0708 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)