Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2019-0708

A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker

Published
Last modified
published
Listed in CISA KEV
None on Exploit-DB, Metasploit or GitHub

Summary

Microsoft Remote Desktop Services (formerly known as Terminal Services) is affected. An unauthenticated attacker who can connect over RDP and send specially crafted requests could run arbitrary code on the target system.

Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.

Read the original description

A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop Services Remote Code Execution Vulnerability'.

Timeline

  1. CVE published
  2. Added to CISA KEV

    CISA has evidence of exploitation in the wild

  3. CISA remediation deadline

    Due date for US federal agencies to patch

  4. Record last updated
  5. EPSS reached 10%

    FIRST estimates at least a 10% chance of exploitation in the next 30 days

Affected versions

  • Microsoft Windows

    7 for 32-bit Systems Service Pack 1, 7 for x64-based Systems Service Pack 1

  • Microsoft Windows Server

    2008 R2 for x64-based Systems Service Pack 1 (Core installation), 2008 R2 for Itanium-Based Systems Service Pack 1, 2008 R2 for x64-based Systems Service Pack 1, 2008 for 32-bit Systems Service Pack 2 (Core installation), 2008 for Itanium-Based Systems Service Pack 2, 2008 for 32-bit Systems Service Pack 2, 2008 for x64-based Systems Service Pack 2, 2008 for x64-based Systems Service Pack 2 (Core installation)

References 14

portal.msrc.microsoft.com

cert-portal.siemens.com

huawei.com

packetstormsecurity.com