CVEvulnerability

CVE-2019-0708

9.8 CRITICAL Known exploited Published 2019-05-16 Modified 2026-06-17 Official page ↗

CISA Known Exploited Vulnerability

Microsoft Remote Desktop Services Remote Code Execution Vulnerability — Microsoft Remote Desktop Services

Microsoft Remote Desktop Services, formerly known as Terminal Service, contains an unspecified vulnerability that allows an unauthenticated attacker to connect to the target system using RDP and send specially crafted requests. Successful exploitation allows for remote code execution. The vulnerability is also known under the moniker of BlueKeep.

Added to KEV
2021-11-03
Remediation due
2022-05-03
Ransomware use
Known
Required action
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2019-0708
Status
Analyzed
Published
2019-05-16
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-416

Description

A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop Services Remote Code Execution Vulnerability'.

Affected configurations

• microsoft windows 7 • microsoft windows server 2008 • microsoft windows server 2008 r2 • siemens axiom multix m firmware • siemens axiom vertix md trauma firmware • siemens axiom vertix solitaire m firmware • siemens mobilett xp digital firmware • siemens multix pro acss p firmware • siemens multix pro p firmware • siemens multix pro firmware • siemens multix pro acss firmware • siemens multix pro navy firmware • siemens multix swing firmware • siemens multix top firmware • siemens multix top acss firmware • siemens multix top p firmware • siemens multix top acss p firmware • siemens vertix solitaire firmware • siemens atellica solution firmware • siemens aptio firmware • siemens streamlab firmware • siemens centralink firmware • siemens viva e firmware • siemens viva twin firmware • siemens syngo lab process manager • siemens rapidpoint 500 firmware (<= 2.3.2) • siemens lantis firmware • huawei agile controller-campus firmware v100r002c00 • huawei agile controller-campus firmware v100r002c10 • huawei bh620 v2 firmware v100r002c00 • huawei bh621 v2 firmware v100r002c00 • huawei bh622 v2 firmware v100r001c00 • huawei bh640 v2 firmware v100r002c00 • huawei ch121 firmware v100r001c00 • huawei ch140 firmware v100r001c00 • huawei ch220 firmware v100r001c00 • huawei ch221 firmware v100r001c00 • huawei ch222 firmware v100r002c00 • huawei ch240 firmware v100r001c00 • huawei ch242 firmware v100r001c00 • huawei ch242 v3 firmware v100r001c00 • huawei e6000 firmware v100r002c00 • huawei e6000 chassis firmware v100r001c00 • huawei gtsoftx3000 firmware v200r001c01spc100 • huawei gtsoftx3000 firmware v200r002c00spc300 • huawei gtsoftx3000 firmware v200r002c10spc100 • huawei oceanstor 18500 firmware v100r001c30spc300 • huawei oceanstor 18800 firmware v100r001c30spc300 • huawei oceanstor 18800f firmware v100r001c30spc300 • huawei oceanstor hvs85t firmware v100r001c00 • huawei oceanstor hvs85t firmware v100r001c30spc200 • huawei oceanstor hvs88t firmware v100r001c00 • huawei oceanstor hvs88t firmware v100r001c30spc200 • huawei rh1288 v2 firmware v100r002c00 • huawei rh1288a v2 firmware v100r002c00 • huawei rh2265 v2 firmware v100r002c00 • huawei rh2268 v2 firmware v100r002c00 • huawei rh2285 v2 firmware v100r002c00 • huawei rh2285h v2 firmware v100r002c00 • huawei rh2288 v2 firmware v100r002c00 … and 15 more

Related

Weakness · CWE (1)

References