CVE-2019-0708: Microsoft Remote Desktop Services Remote Code Execution Vulnerability
Published May 16, 2019
·Updated
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop Services Remote Code Execution Vulnerability'.
Other sources
Microsoft Remote Desktop Services, formerly known as Terminal Service, contains an unspecified vulnerability that allows an unauthenticated attacker to connect to the target system using RDP and send specially crafted requests. Successful exploitation allows for remote code execution. The vulnerability is also known under the moniker of BlueKeep.
— CISA
Affected Software
148 affected components
Microsoft Windows 7=sp1
Microsoft Windows Server 2003=sp2
Microsoft Windows Server 2003=sp2
Microsoft Windows Server 2003=r2-sp2
Microsoft Windows Server 2008=sp2
Microsoft Windows Server 2008=r2-sp1
Microsoft Windows Server 2008=r2-sp1
Microsoft Windows Vista=sp2
Microsoft Windows XP=sp2
Microsoft Windows XP=sp3
Microsoft Remote Desktop Services
Microsoft Windows Server 2008=r2-sp1
All of the following
Siemens Axiom Multix M Firmware
Siemens Axiom Multix M
All of the following
Siemens Axiom Vertix Md Trauma Firmware
Siemens Axiom Vertix Md Trauma
All of the following
Siemens Axiom Vertix Solitaire M Firmware
Siemens Axiom Vertix Solitaire M
All of the following
Siemens Mobilett Xp Digital Firmware
Siemens Mobilett Xp Digital
All of the following
Siemens Multix Pro Acss P Firmware
Siemens Multix Pro Acss P
All of the following
Siemens Multix Pro P Firmware
Siemens Multix Pro P
All of the following
Siemens Multix Pro Firmware
Siemens Multix Pro
All of the following
Siemens Multix Pro Acss Firmware
Siemens Multix Pro Acss
All of the following
Siemens Multix Pro Navy Firmware
Siemens Multix Pro Navy
All of the following
Siemens Multix Swing Firmware
Siemens Multix Swing
All of the following
Siemens Multix Top Firmware
Siemens Multix Top
All of the following
Siemens Multix Top Acss Firmware
Siemens Multix Top Acss
All of the following
Siemens Multix Top P Firmware
Siemens Multix Top P
All of the following
Siemens Multix Top Acss P Firmware
Siemens Multix Top Acss P
All of the following
Siemens Vertix Solitaire Firmware
Siemens Vertix Solitaire
All of the following
Siemens Atellica Solution Firmware
Siemens Atellica Solution
All of the following
Siemens Aptio Firmware
Siemens Aptio
All of the following
Siemens Streamlab Firmware
Siemens Streamlab
All of the following
Siemens Centralink Firmware
Siemens Centralink
All of the following
Siemens Viva E Firmware
Siemens Viva E
All of the following
Siemens Viva Twin Firmware
Siemens Viva Twin
Siemens Syngo Lab Process Manager
All of the following
Siemens Rapidpoint 500 Firmware<=2.3.2
Siemens RAPIDPoint 500
All of the following
Siemens Lantis Firmware
Siemens Lantis
All of the following
Any of the following
Huawei Agile Controller-campus Firmware=v100r002c00
Huawei Agile Controller-campus Firmware=v100r002c10
Huawei Agile Controller-Campus
All of the following
Huawei Bh620 V2 Firmware=v100r002c00
Huawei Bh620 V2
All of the following
Huawei Bh621 V2 Firmware=v100r002c00
Huawei Bh621 V2
All of the following
Huawei Bh622 V2 Firmware=v100r001c00
Huawei Bh622 V2
All of the following
Huawei Bh640 V2 Firmware=v100r002c00
Huawei Bh640 V2
All of the following
Huawei Ch121 Firmware=v100r001c00
Huawei Ch121
All of the following
Huawei Ch140 Firmware=v100r001c00
Huawei Ch140
All of the following
Huawei Ch220 Firmware=v100r001c00
Huawei Ch220
All of the following
Huawei Ch221 Firmware=v100r001c00
Huawei Ch221
All of the following
Huawei Ch222 Firmware=v100r002c00
Huawei Ch222
All of the following
Huawei Ch240 Firmware=v100r001c00
Huawei Ch240
All of the following
Huawei Ch242 Firmware=v100r001c00
Huawei Ch242
All of the following
Huawei Ch242 V3 Firmware=v100r001c00
Huawei Ch242 V3
All of the following
Huawei E6000 Firmware=v100r002c00
Huawei E6000
All of the following
Huawei E6000 Chassis Firmware=v100r001c00
Huawei E6000 Chassis
All of the following
Any of the following
Huawei Gtsoftx3000 Firmware=v200r001c01spc100
Huawei Gtsoftx3000 Firmware=v200r002c00spc300
Huawei Gtsoftx3000 Firmware=v200r002c10spc100
Huawei Gtsoftx3000
All of the following
Huawei Oceanstor 18500 Firmware=v100r001c30spc300
Huawei Oceanstor 18500
All of the following
Huawei Oceanstor 18800 Firmware=v100r001c30spc300
Huawei Oceanstor 18800
All of the following
Huawei Oceanstor 18800f Firmware=v100r001c30spc300
Huawei Oceanstor 18800f
All of the following
Any of the following
Huawei Oceanstor Hvs85t Firmware=v100r001c00
Huawei Oceanstor Hvs85t Firmware=v100r001c30spc200
Huawei Oceanstor Hvs85t
All of the following
Any of the following
Huawei Oceanstor Hvs88t Firmware=v100r001c00
Huawei Oceanstor Hvs88t Firmware=v100r001c30spc200
Huawei Oceanstor Hvs88t
All of the following
Huawei Rh1288 V2 Firmware=v100r002c00
Huawei Rh1288 V2
All of the following
Huawei Rh1288a V2 Firmware=v100r002c00
Huawei RH1288A V2
All of the following
Huawei Rh2265 V2 Firmware=v100r002c00
Huawei Rh2265 V2
All of the following
Huawei Rh2268 V2 Firmware=v100r002c00
Huawei Rh2268 V2
All of the following
Huawei Rh2285 V2 Firmware=v100r002c00
Huawei Rh2285 V2
All of the following
Huawei Rh2285h V2 Firmware=v100r002c00
Huawei Rh2285h V2
All of the following
Huawei Rh2288 V2 Firmware=v100r002c00
Huawei Rh2288 V2
All of the following
Huawei Rh2288a V2 Firmware=v100r002c00
Huawei RH2288A V2
All of the following
Huawei Rh2288e V2 Firmware=v100r002c00
Huawei Rh2288e V2
All of the following
Huawei Rh2288h V2 Firmware=v100r002c00
Huawei Rh2288h V2
All of the following
Huawei Rh2485 V2 Firmware=v100r002c00
Huawei Rh2485 V2
All of the following
Huawei Rh5885 V2 Firmware=v100r001c00
Huawei Rh5885 V2
All of the following
Huawei Rh5885 V3 Firmware=v100r003c00
Huawei Rh5885 V3
All of the following
Any of the following
Huawei Smc2.0 Firmware=v500r002c00
Huawei Smc2.0 Firmware=v600r006c00
Huawei SMC2.0
All of the following
Huawei Seco Vsm Firmware=v200r002c00
Huawei Seco Vsm
All of the following
Any of the following
Huawei Uma Firmware=v200r001c00
Huawei Uma Firmware=v300r001c00
Huawei UMA
All of the following
Huawei X6000 Firmware=v100r002c00
Huawei X6000
All of the following
Huawei X8000 Firmware=v100r002c20
Huawei X8000
All of the following
Huawei Elog Firmware=v200r003c10
Huawei Elog
All of the following
Huawei Espace Ecs Firmware=v300r001c00
Huawei Espace Ecs
Remediation
Event History
May 16, 2019
CVE Published
via MITRE·06:17 PM
Data Sourced
via MITRE·06:17 PM
DescriptionWeakness
Data Sourced
via NVD·07:29 PM
RemedyDescriptionSeverityWeaknessAffected Software
Nov 3, 2021
Known Exploited
via CISA·12:00 AM
Known Ransomware
via CISA·12:00 AM
Data Sourced
via CISA·12:00 AM
DescriptionAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2019-0708?
The severity of CVE-2019-0708 is critical with a rating of 9.8.
2
How does CVE-2019-0708 impact Microsoft Remote Desktop Services?
CVE-2019-0708 allows an unauthenticated attacker to connect to the target system using RDP and send specially crafted requests, resulting in remote code execution.
3
Which software is affected by CVE-2019-0708?
The affected software includes Microsoft Remote Desktop Services, as well as Microsoft Windows 7, Windows Server 2003, Windows Server 2008, Windows Vista, and Windows XP.
4
Is there a fix available for CVE-2019-0708?
Yes, Microsoft has released security updates to address the vulnerability. It is recommended to install the latest updates to mitigate the risk.
5
Are there any known exploits or proof-of-concept for CVE-2019-0708?
Yes, there are known exploits and proof-of-concept code available for CVE-2019-0708, highlighting the importance of applying the necessary security patches.