CVE-2019-0708

Warnung

Medienbericht

Exploit

EPSS 100%
Veröffentlicht 16.05.2019 19:29:00
Zuletzt bearbeitet 29.10.2025 14:45:37
Erkennungen
Login

A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop Services Remote Code Execution Vulnerability'.

Betroffene Produkte Warnungen 1 Metriken 4 CWE 1 Referenzen 20

NVD 75 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Windows 7 Version - Update sp1

Microsoft ≫ Windows Server 2008 Version - Update sp2

Microsoft ≫ Windows Server 2008 Version r2 Update sp1

Siemens ≫ Axiom Multix M Firmware

Siemens ≫ Axiom Multix M Version -

Siemens ≫ Axiom Vertix Md Trauma Firmware

Siemens ≫ Axiom Vertix Md Trauma Version -

Siemens ≫ Axiom Vertix Solitaire M Firmware

Siemens ≫ Axiom Vertix Solitaire M Version -

Siemens ≫ Mobilett Xp Digital Firmware

Siemens ≫ Mobilett Xp Digital Version -

Siemens ≫ Multix Pro Acss P Firmware

Siemens ≫ Multix Pro Acss P Version -

Siemens ≫ Multix Pro P Firmware

Siemens ≫ Multix Pro P Version -

Siemens ≫ Multix Pro Firmware

Siemens ≫ Multix Pro Version -

Siemens ≫ Multix Pro Acss Firmware

Siemens ≫ Multix Pro Acss Version -

Siemens ≫ Multix Pro Navy Firmware

Siemens ≫ Multix Pro Navy Version -

Siemens ≫ Multix Swing Firmware

Siemens ≫ Multix Swing Version -

Siemens ≫ Multix Top Firmware

Siemens ≫ Multix Top Version -

Siemens ≫ Multix Top Acss Firmware

Siemens ≫ Multix Top Acss Version -

Siemens ≫ Multix Top P Firmware

Siemens ≫ Multix Top P Version -

Siemens ≫ Multix Top Acss P Firmware

Siemens ≫ Multix Top Acss P Version -

Siemens ≫ Vertix Solitaire Firmware

Siemens ≫ Vertix Solitaire Version -

Siemens ≫ Atellica Solution Firmware

Siemens ≫ Atellica Solution Version -

Siemens ≫ Aptio Firmware

Siemens ≫ Aptio Version -

Siemens ≫ Streamlab Firmware

Siemens ≫ Streamlab Version -

Siemens ≫ Centralink Firmware

Siemens ≫ Centralink Version -

Siemens ≫ Viva E Firmware

Siemens ≫ Viva E Version -

Siemens ≫ Viva Twin Firmware

Siemens ≫ Viva Twin Version -

Siemens ≫ Syngo Lab Process Manager

Siemens ≫ Rapidpoint 500 Firmware Version <= 2.3.2

Siemens ≫ Rapidpoint 500 Version -

Siemens ≫ Lantis Firmware

Siemens ≫ Lantis Version -

Huawei ≫ Agile Controller-campus Firmware Version v100r002c00

Huawei ≫ Agile Controller-campus Version -

Huawei ≫ Agile Controller-campus Firmware Version v100r002c10

Huawei ≫ Agile Controller-campus Version -

Huawei ≫ Bh620 V2 Firmware Version v100r002c00

Huawei ≫ Bh620 V2 Version -

Huawei ≫ Bh621 V2 Firmware Version v100r002c00

Huawei ≫ Bh621 V2 Version -

Huawei ≫ Bh622 V2 Firmware Version v100r001c00

Huawei ≫ Bh622 V2 Version -

Huawei ≫ Bh640 V2 Firmware Version v100r002c00

Huawei ≫ Bh640 V2 Version -

Huawei ≫ Ch121 Firmware Version v100r001c00

Huawei ≫ Ch121 Version -

Huawei ≫ Ch140 Firmware Version v100r001c00

Huawei ≫ Ch140 Version -

Huawei ≫ Ch220 Firmware Version v100r001c00

Huawei ≫ Ch220 Version -

Huawei ≫ Ch221 Firmware Version v100r001c00

Huawei ≫ Ch221 Version -

Huawei ≫ Ch222 Firmware Version v100r002c00

Huawei ≫ Ch222 Version -

Huawei ≫ Ch240 Firmware Version v100r001c00

Huawei ≫ Ch240 Version -

Huawei ≫ Ch242 Firmware Version v100r001c00

Huawei ≫ Ch242 Version -

Huawei ≫ Ch242 V3 Firmware Version v100r001c00

Huawei ≫ Ch242 V3 Version -

Huawei ≫ E6000 Firmware Version v100r002c00

Huawei ≫ E6000 Version -

Huawei ≫ E6000 Chassis Firmware Version v100r001c00

Huawei ≫ E6000 Chassis Version -

Huawei ≫ Gtsoftx3000 Firmware Version v200r001c01spc100

Huawei ≫ Gtsoftx3000 Version -

Huawei ≫ Gtsoftx3000 Firmware Version v200r002c00spc300

Huawei ≫ Gtsoftx3000 Version -

Huawei ≫ Gtsoftx3000 Firmware Version v200r002c10spc100

Huawei ≫ Gtsoftx3000 Version -

Huawei ≫ Oceanstor 18500 Firmware Version v100r001c30spc300

Huawei ≫ Oceanstor 18500 Version -

Huawei ≫ Oceanstor 18800 Firmware Version v100r001c30spc300

Huawei ≫ Oceanstor 18800 Version -

Huawei ≫ Oceanstor 18800f Firmware Version v100r001c30spc300

Huawei ≫ Oceanstor 18800f Version -

Huawei ≫ Oceanstor Hvs85t Firmware Version v100r001c00

Huawei ≫ Oceanstor Hvs85t Version -

Huawei ≫ Oceanstor Hvs85t Firmware Version v100r001c30spc200

Huawei ≫ Oceanstor Hvs85t Version -

Huawei ≫ Oceanstor Hvs88t Firmware Version v100r001c00

Huawei ≫ Oceanstor Hvs88t Version -

Huawei ≫ Oceanstor Hvs88t Firmware Version v100r001c30spc200

Huawei ≫ Oceanstor Hvs88t Version -

Huawei ≫ Rh1288 V2 Firmware Version v100r002c00

Huawei ≫ Rh1288 V2 Version -

Huawei ≫ Rh1288a V2 Firmware Version v100r002c00

Huawei ≫ Rh1288a V2 Version -

Huawei ≫ Rh2265 V2 Firmware Version v100r002c00

Huawei ≫ Rh2265 V2 Version -

Huawei ≫ Rh2268 V2 Firmware Version v100r002c00

Huawei ≫ Rh2268 V2 Version -

Huawei ≫ Rh2285 V2 Firmware Version v100r002c00

Huawei ≫ Rh2285 V2 Version -

Huawei ≫ Rh2285h V2 Firmware Version v100r002c00

Huawei ≫ Rh2285h V2 Version -

Huawei ≫ Rh2288 V2 Firmware Version v100r002c00

Huawei ≫ Rh2288 V2 Version -

Huawei ≫ Rh2288a V2 Firmware Version v100r002c00

Huawei ≫ Rh2288a V2 Version -

Huawei ≫ Rh2288e V2 Firmware Version v100r002c00

Huawei ≫ Rh2288e V2 Version -

Huawei ≫ Rh2288h V2 Firmware Version v100r002c00

Huawei ≫ Rh2288h V2 Version -

Huawei ≫ Rh2485 V2 Firmware Version v100r002c00

Huawei ≫ Rh2485 V2 Version -

Huawei ≫ Rh5885 V2 Firmware Version v100r001c00

Huawei ≫ Rh5885 V2 Version -

Huawei ≫ Rh5885 V3 Firmware Version v100r003c00

Huawei ≫ Rh5885 V3 Version -

Huawei ≫ Smc2.0 Firmware Version v500r002c00

Huawei ≫ Smc2.0 Version -

Huawei ≫ Smc2.0 Firmware Version v600r006c00

Huawei ≫ Smc2.0 Version -

Huawei ≫ Seco Vsm Firmware Version v200r002c00

Huawei ≫ Seco Vsm Version -

Huawei ≫ Uma Firmware Version v200r001c00

Huawei ≫ Uma Version -

Huawei ≫ Uma Firmware Version v300r001c00

Huawei ≫ Uma Version -

Huawei ≫ X6000 Firmware Version v100r002c00

Huawei ≫ X6000 Version -

Huawei ≫ X8000 Firmware Version v100r002c20

Huawei ≫ X8000 Version -

Huawei ≫ Elog Firmware Version v200r003c10

Huawei ≫ Elog Version -

Huawei ≫ Espace Ecs Firmware Version v300r001c00

Huawei ≫ Espace Ecs Version -

03.11.2021: CISA Known Exploited Vulnerabilities (KEV) Catalog

Microsoft Remote Desktop Services Remote Code Execution Vulnerability

Schwachstelle

Microsoft Remote Desktop Services, formerly known as Terminal Service, contains an unspecified vulnerability that allows an unauthenticated attacker to connect to the target system using RDP and send specially crafted requests. Successful exploitation allows for remote code execution. The vulnerability is also known under the moniker of BlueKeep.

Beschreibung

Apply updates per vendor instructions.

Erforderliche Maßnahmen

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	100%	1

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C
CISA-ADP	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-416 Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.

VulnDex Intel

Media Report

16.09.2026 18:41

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.

VulnDex Intel

Media Report

30.04.2026 16:24

http://packetstormsecurity.com/files/153133/Microsoft-Windows-Remote-Desktop-BlueKeep-Denial-Of-Service.html

Third Party Advisory

Exploit

VDB Entry

http://packetstormsecurity.com/files/153627/Microsoft-Windows-RDP-BlueKeep-Denial-Of-Service.html

Third Party Advisory

Exploit

VDB Entry

http://packetstormsecurity.com/files/154579/BlueKeep-RDP-Remote-Windows-Kernel-Use-After-Free.html

Third Party Advisory

Exploit

VDB Entry

http://packetstormsecurity.com/files/155389/Microsoft-Windows-7-x86-BlueKeep-RDP-Use-After-Free.html

Third Party Advisory

VDB Entry

http://packetstormsecurity.com/files/162960/Microsoft-RDP-Remote-Code-Execution.html

Third Party Advisory

Exploit

VDB Entry

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190529-01-windows-en

Third Party Advisory

http://www.huawei.com/en/psirt/security-notices/huawei-sn-20190515-01-windows-en

Third Party Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-166360.pdf

Third Party Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-406175.pdf

Third Party Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-433987.pdf

Third Party Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-616199.pdf

Third Party Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-832947.pdf

Third Party Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-932041.pdf

Third Party Advisory

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0708

Patch

Vendor Advisory

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-0708

US Government Resource

https://nvd.nist.gov/vuln/detail/CVE-2019-0708

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2019-0708

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2019-0708

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2019-0708

03.11.2021: CISA Known Exploited Vulnerabilities (KEV) Catalog