Critical severity · published May 16, 2019
CVE-2019-0708
Microsoft Remote Desktop Services Remote Code Execution Vulnerability
RansomwareIn wildKEV
9.8
CVSS
100%
EPSS
Yes
On KEV
Description
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop Services Remote Code Execution Vulnerability'.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)100.0% · higher than 100% of CVEs
Exploited in the wildYes
CISA KEVListed Nov 3, 2021
Federal remediation dueMay 3, 2022
Ransomware campaign useKnown
Affected products
Which versions
WI
Windows · Microsoft
7 for 32-bit Systems Service Pack 1; 7 for x64-based Systems Service Pack 1 · source: vendor
AC
Agile Controller-campus Firmware · Huawei
v100r002c00; v100r002c10 · source: NVD
AF
Aptio Firmware · Siemens
All versions, or not specified · source: NVD
AS
Atellica Solution Firmware · Siemens
All versions, or not specified · source: NVD
AM
Axiom Multix M Firmware · Siemens
All versions, or not specified · source: NVD
AV
Axiom Vertix MD Trauma Firmware · Siemens
All versions, or not specified · source: NVD
AV
Axiom Vertix Solitaire M Firmware · Siemens
All versions, or not specified · source: NVD
BV
Bh620 V2 Firmware · Huawei
v100r002c00 · source: NVD
BV
Bh621 V2 Firmware · Huawei
v100r002c00 · source: NVD
BV
Bh622 V2 Firmware · Huawei
v100r001c00 · source: NVD
BV
Bh640 V2 Firmware · Huawei
v100r002c00 · source: NVD
CF
Centralink Firmware · Siemens
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-0708
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-0708
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
x_refsource_MISC
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0708
x_refsource_CONFIRM
https://cert-portal.siemens.com/productcert/pdf/ssa-932041.pdf
x_refsource_CONFIRM
https://cert-portal.siemens.com/productcert/pdf/ssa-616199.pdf
x_refsource_CONFIRM
https://cert-portal.siemens.com/productcert/pdf/ssa-433987.pdf
x_refsource_CONFIRM
https://cert-portal.siemens.com/productcert/pdf/ssa-832947.pdf
x_refsource_CONFIRM
https://cert-portal.siemens.com/productcert/pdf/ssa-166360.pdf
More from Windows
10.0
CVE-2020-1350
Microsoft Windows DNS Server Remote Code Execution Vulnerability
9.8
CVE-2025-59287
Windows Server Update Service (WSUS) Remote Code Execution Vulnerability
9.8
CVE-2017-8543
Microsoft Windows Search Remote Code Execution Vulnerability
9.8
CVE-2008-4250
Microsoft Windows Buffer Overflow Vulnerability
9.0
CVE-2020-1040
Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability