NetSight
IP …
critical9.8Known exploitedPublic exploit code

CVE-2019-0708

Microsoft Remote Desktop Services Remote Code Execution Vulnerability

Exploited in the wild

This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2021-11-03. Federal due date: 2022-05-03.

Apply updates per vendor instructions.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop Services Remote Code Execution Vulnerability'.

Affected products

VendorProductAffected versions
MicrosoftWindows 7
All versions
MicrosoftWindows Server 2008
All versions
Version r2
SiemensAxiom Multix M Firmware
All versions
SiemensAxiom Vertix Md Trauma Firmware
All versions
SiemensAxiom Vertix Solitaire M Firmware
All versions
SiemensMobilett Xp Digital Firmware
All versions
SiemensMultix Pro Acss P Firmware
All versions
SiemensMultix Pro P Firmware
All versions
SiemensMultix Pro Firmware
All versions
SiemensMultix Pro Acss Firmware
All versions
SiemensMultix Pro Navy Firmware
All versions
SiemensMultix Swing Firmware
All versions

Weakness classification

CWE-416

References