Exploited
critical
10
CWE
416
Advisory Published
Updated

CVE-2019-0708: Microsoft Remote Desktop Services Remote Code Execution Vulnerability

First published: Thu May 16 2019(Updated: )

A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop Services Remote Code Execution Vulnerability'.

Credit: secure@microsoft.com secure@microsoft.com

Affected SoftwareAffected VersionHow to fix
Microsoft Windows 7=sp1
Microsoft Windows Server=sp2
Microsoft Windows Server=sp2
Microsoft Windows Server=r2-sp2
Microsoft Windows Server=sp2
Microsoft Windows Server=r2-sp1
Microsoft Windows Server=r2-sp1
Microsoft Windows Vista=sp2
Microsoft Windows XP=sp2
Microsoft Windows XP=sp3
Microsoft Remote Desktop
Microsoft Windows Server=r2-sp1
All of
Siemens Axiom Multix M Firmware
Siemens Axiom Multix M Firmware
All of
Siemens Axiom Vertix MD Trauma
Siemens Axiom Vertix MD Trauma
All of
Siemens Vertix Solitaire
Siemens Axiom Vertix Solitaire M Firmware
All of
Siemens Mobilett XP Digital
Siemens Mobilett XP Digital
All of
Siemens Multix Pro Firmware
Siemens Multix Pro ACSS
All of
Siemens Multix Pro Firmware
Siemens Multix Pro P Firmware
All of
Siemens Multix Pro P Firmware
Siemens Multix Pro P Firmware
All of
Siemens Multix Pro Firmware
Siemens Multix Pro Firmware
All of
Siemens Multix Pro Navy
Siemens Multix Pro Navy Firmware
All of
Siemens Multix Swing Firmware
Siemens Multix Swing
All of
Siemens Multix Top Firmware
Siemens Multix Top
All of
Siemens Multix Top ACSS Firmware
Siemens Multix Top ACSS
All of
Siemens Multix Top ACSS P Firmware
Siemens Multix Top P Firmware
All of
Siemens Multix Top
Siemens Multix Top ACSS P Firmware
All of
Siemens Vertix Solitaire
Siemens Vertix Solitaire
All of
Siemens Atellica Solution
Siemens Atellica Solution
All of
Siemens Aptio
Siemens Aptio Firmware
All of
Siemens Streamlab
Siemens StreamLab Firmware
All of
Siemens Centralink
Siemens Centralink Firmware
All of
Siemens VIVA
Siemens VIVA
All of
Siemens Viva Twin Firmware
Siemens Viva Twin Firmware
Siemens Syngo Lab Process Manager
All of
Siemens RapidPoint 500 Firmware<=2.3.2
Siemens RapidPoint 500 Firmware
All of
Siemens LANTIS
Siemens LANTIS
All of
Any of
Huawei Agile Controller-Campus Firmware=v100r002c00
Huawei Agile Controller-Campus Firmware=v100r002c10
Huawei Agile Controller-Campus Firmware
All of
Huawei Tecal Bh620 V2 Firmware=v100r002c00
Huawei Bh620 V2 Firmware
All of
Huawei Tecal Bh621 V2 Firmware=v100r002c00
Huawei Tecal Bh621 V2
All of
Huawei Tecal Bh622 V2 Firmware=v100r001c00
Huawei Tecal Bh622 V2
All of
Huawei BH640 V2 Firmware=v100r002c00
Huawei Tecal Bh640 V2
All of
Huawei Tecal Ch121 Firmware=v100r001c00
Huawei Tecal Ch121
All of
Huawei CH140=v100r001c00
Huawei CH140 Firmware
All of
Huawei Tecal CH220 Firmware=v100r001c00
Huawei Tecal CH220
All of
Huawei Tecal Ch221 Firmware=v100r001c00
Huawei Tecal Ch221
All of
Huawei Tecal Ch222 Firmware=v100r002c00
Huawei Tecal Ch222
All of
Huawei Tecal Ch240 Firmware=v100r001c00
Huawei CH240 Firmware
All of
Huawei Tecal Ch242 Firmware=v100r001c00
Huawei Tecal Ch242
All of
Huawei Tecal Ch242 V3 Firmware=v100r001c00
Huawei Tecal Ch242 V3 Firmware
All of
Huawei E6000 Chassis Firmware=v100r002c00
Huawei E6000 Chassis Firmware
All of
Huawei E6000 Chassis Firmware=v100r001c00
Huawei E6000
All of
Any of
Huawei GTSoftX3000=v200r001c01spc100
Huawei GTSoftX3000=v200r002c00spc300
Huawei GTSoftX3000=v200r002c10spc100
Huawei GTSoftX3000 Firmware
All of
Huawei OceanStor 18500 Firmware=v100r001c30spc300
Huawei OceanStor 18500 V3
All of
Huawei OceanStor 18800 V3=v100r001c30spc300
Huawei OceanStor 18800 V3
All of
Huawei OceanStor 18800 Firmware=v100r001c30spc300
Huawei OceanStor 18800F Firmware
All of
Any of
Huawei OceanStor HVS85T Firmware=v100r001c00
Huawei OceanStor HVS85T Firmware=v100r001c30spc200
Huawei OceanStor HVS85T Firmware
All of
Any of
Huawei OceanStor HVS88T Firmware=v100r001c00
Huawei OceanStor HVS88T Firmware=v100r001c30spc200
Huawei OceanStor HVS88T Firmware
All of
Huawei Tecal Rh1288 V2 Firmware=v100r002c00
Huawei Tecal RH1288 V2
All of
Huawei RH1288A V2 Firmware=v100r002c00
Huawei FusionServer RH1288A V2
All of
Huawei Tecal Rh2265 V2 Firmware=v100r002c00
Huawei Tecal Rh2265 V2
All of
Huawei Tecal Rh2268 V2 Firmware=v100r002c00
Huawei Tecal RH2268 V2
All of
Huawei Tecal Rh2285 V2 Firmware=v100r002c00
Huawei Tecal Rh2285 V2
All of
Huawei Tecal RH2285H V2 Firmware=v100r002c00
Huawei Tecal RH2285H V2
All of
Huawei RH2288E V2 Firmware=v100r002c00
Huawei Tecal RH2288 V2
All of
Huawei RH1288A V2 Firmware=v100r002c00
Huawei RH1288A V2 Firmware
All of
Huawei RH2288E V2=v100r002c00
Huawei RH2288E V2 Firmware
All of
Huawei RH2288 V2 Firmware=v100r002c00
Huawei Tecal Rh2288h V2
All of
Huawei Tecal Rh2485 V2 Firmware=v100r002c00
Huawei Tecal Rh2485 V2
All of
Huawei Tecal Rh5885 V2 Firmware=v100r001c00
Huawei Tecal RH5885 V2
All of
Huawei Tecal Rh5885 V3 Firmware=v100r003c00
Huawei Tecal Rh5885h V3
All of
Any of
Huawei SMC 2.0=v500r002c00
Huawei SMC 2.0=v600r006c00
Huawei SMC2.0 firmware
All of
Huawei SECO VSM=v200r002c00
Huawei SECO VSM Firmware
All of
Any of
Huawei UMA=v200r001c00
Huawei UMA=v300r001c00
Huawei UMA Firmware
All of
Huawei X6000=v100r002c00
Huawei X6000 Firmware
All of
Huawei X8000=v100r002c20
Huawei X8000 Firmware
All of
Huawei ELog=v200r003c10
Huawei ELog
All of
Huawei eSpace ECS=v300r001c00
Huawei eSpace ECS Firmware
=sp1
=sp2
=r2-sp1
All of
All of
All of
All of
All of
All of
All of
All of
All of
All of
All of
All of
All of
All of
All of
All of
All of
All of
All of
All of
All of
All of
<=2.3.2
All of
All of
Any of
=v100r002c00
=v100r002c10
All of
=v100r002c00
All of
=v100r002c00
All of
=v100r001c00
All of
=v100r002c00
All of
=v100r001c00
All of
=v100r001c00
All of
=v100r001c00
All of
=v100r001c00
All of
=v100r002c00
All of
=v100r001c00
All of
=v100r001c00
All of
=v100r001c00
All of
=v100r002c00
All of
=v100r001c00
All of
Any of
=v200r001c01spc100
=v200r002c00spc300
=v200r002c10spc100
All of
=v100r001c30spc300
All of
=v100r001c30spc300
All of
=v100r001c30spc300
All of
Any of
=v100r001c00
=v100r001c30spc200
All of
Any of
=v100r001c00
=v100r001c30spc200
All of
=v100r002c00
All of
=v100r002c00
All of
=v100r002c00
All of
=v100r002c00
All of
=v100r002c00
All of
=v100r002c00
All of
=v100r002c00
All of
=v100r002c00
All of
=v100r002c00
All of
=v100r002c00
All of
=v100r002c00
All of
=v100r001c00
All of
=v100r003c00
All of
Any of
=v500r002c00
=v600r006c00
All of
=v200r002c00
All of
Any of
=v200r001c00
=v300r001c00
All of
=v100r002c00
All of
=v100r002c20
All of
=v200r003c10
All of
=v300r001c00

Remedy

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0708

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the severity of CVE-2019-0708?

    The severity of CVE-2019-0708 is critical with a rating of 9.8.

  • How does CVE-2019-0708 impact Microsoft Remote Desktop Services?

    CVE-2019-0708 allows an unauthenticated attacker to connect to the target system using RDP and send specially crafted requests, resulting in remote code execution.

  • Which software is affected by CVE-2019-0708?

    The affected software includes Microsoft Remote Desktop Services, as well as Microsoft Windows 7, Windows Server 2003, Windows Server 2008, Windows Vista, and Windows XP.

  • Is there a fix available for CVE-2019-0708?

    Yes, Microsoft has released security updates to address the vulnerability. It is recommended to install the latest updates to mitigate the risk.

  • Are there any known exploits or proof-of-concept for CVE-2019-0708?

    Yes, there are known exploits and proof-of-concept code available for CVE-2019-0708, highlighting the importance of applying the necessary security patches.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203