What’s Vulnerable › Vulnerabilities

CVE-2019-0708: Microsoft Remote Desktop Services Remote Code Execution Vulnerability

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: yes — in CISA KEV since 2021-11-03
• EPSS: 100.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-05-16 · updated 2026-06-17
• Weakness: CWE-416

Description

A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop Services Remote Code Execution Vulnerability'.

Affected products

• Huawei Agile Controller-Campus Firmware: v100r002c00, v100r002c10
• Huawei Bh620 V2 Firmware: v100r002c00
• Huawei Bh621 V2 Firmware: v100r002c00
• Huawei Bh622 V2 Firmware: v100r001c00
• Huawei Bh640 V2 Firmware: v100r002c00
• Huawei Ch121 Firmware: v100r001c00
• Huawei Ch140 Firmware: v100r001c00
• Huawei Ch220 Firmware: v100r001c00
• Huawei Ch221 Firmware: v100r001c00
• Huawei Ch222 Firmware: v100r002c00
• Huawei Ch240 Firmware: v100r001c00
• Huawei Ch242 Firmware: v100r001c00
• Huawei Ch242 V3 Firmware: v100r001c00
• Huawei E6000 Chassis Firmware: v100r001c00
• Huawei E6000 Firmware: v100r002c00
• Huawei Elog Firmware: v200r003c10
• Huawei Espace Ecs Firmware: v300r001c00
• Huawei Gtsoftx3000 Firmware: v200r001c01spc100, v200r002c00spc300, v200r002c10spc100
• Huawei Oceanstor 18500 Firmware: v100r001c30spc300
• Huawei Oceanstor 18800 Firmware: v100r001c30spc300
• Huawei Oceanstor 18800F Firmware: v100r001c30spc300
• Huawei Oceanstor Hvs85T Firmware: v100r001c00, v100r001c30spc200
• Huawei Oceanstor Hvs88T Firmware: v100r001c00, v100r001c30spc200
• Huawei Rh1288 V2 Firmware: v100r002c00
• Huawei Rh1288A V2 Firmware: v100r002c00
• Huawei Rh2265 V2 Firmware: v100r002c00
• Huawei Rh2268 V2 Firmware: v100r002c00
• Huawei Rh2285 V2 Firmware: v100r002c00
• Huawei Rh2285H V2 Firmware: v100r002c00
• Huawei Rh2288 V2 Firmware: v100r002c00

References

• http://packetstormsecurity.com/files/153133/Microsoft-Windows-Remote-Desktop-BlueKeep-Denial-Of-Service.html
• http://packetstormsecurity.com/files/153627/Microsoft-Windows-RDP-BlueKeep-Denial-Of-Service.html
• http://packetstormsecurity.com/files/154579/BlueKeep-RDP-Remote-Windows-Kernel-Use-After-Free.html
• http://packetstormsecurity.com/files/155389/Microsoft-Windows-7-x86-BlueKeep-RDP-Use-After-Free.html
• http://packetstormsecurity.com/files/162960/Microsoft-RDP-Remote-Code-Execution.html
• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190529-01-windows-en
• http://www.huawei.com/en/psirt/security-notices/huawei-sn-20190515-01-windows-en
• https://cert-portal.siemens.com/productcert/pdf/ssa-166360.pdf
• https://cert-portal.siemens.com/productcert/pdf/ssa-406175.pdf
• https://cert-portal.siemens.com/productcert/pdf/ssa-433987.pdf
• https://cert-portal.siemens.com/productcert/pdf/ssa-616199.pdf
• https://cert-portal.siemens.com/productcert/pdf/ssa-832947.pdf

Get alerted when CVE-2019-0708 or the next vulnerability affects your stack