Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CVE-2019-0708: Remote Desktop can let attackers run code on Windows 7/Server 2008
CVE-2019-0708 · published 7 years ago · actively exploited
Summary
Microsoft Remote Desktop Services on Windows 7 and Windows Server 2008 can be tricked into running malicious code without any login. The flaw also exists in certain Siemens Axiom firmware versions. Install the latest security updates from Microsoft and Siemens, and consider disabling Remote Desktop or restricting it with a firewall.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | remote desktop services | All versions |
| microsoft | windows_7 |
All versions
cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:* |
| microsoft | windows_server_2008 |
r2 cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:* |
| siemens | axiom_multix_m_firmware |
All versions
cpe:2.3:o:siemens:axiom_multix_m_firmware:*:*:*:*:*:*:*:* |
| siemens | axiom_vertix_md_trauma_firmware |
All versions
cpe:2.3:o:siemens:axiom_vertix_md_trauma_firmware:*:*:*:*:*:*:*:* |
| siemens | axiom_vertix_solitaire_m_firmware |
All versions
cpe:2.3:o:siemens:axiom_vertix_solitaire_m_firmware:*:*:*:*:*:*:*:* |
| siemens | mobilett_xp_digital_firmware |
All versions
cpe:2.3:o:siemens:mobilett_xp_digital_firmware:*:*:*:*:*:*:*:* |
| siemens | multix_pro_acss_p_firmware |
All versions
cpe:2.3:o:siemens:multix_pro_acss_p_firmware:*:*:*:*:*:*:*:* |
| siemens | multix_pro_p_firmware |
All versions
cpe:2.3:o:siemens:multix_pro_p_firmware:*:*:*:*:*:*:*:* |
| siemens | multix_pro_firmware |
All versions
cpe:2.3:o:siemens:multix_pro_firmware:*:*:*:*:*:*:*:* |
| siemens | multix_pro_acss_firmware |
All versions
cpe:2.3:o:siemens:multix_pro_acss_firmware:*:*:*:*:*:*:*:* |
| siemens | multix_pro_navy_firmware |
All versions
cpe:2.3:o:siemens:multix_pro_navy_firmware:*:*:*:*:*:*:*:* |
| siemens | multix_swing_firmware |
All versions
cpe:2.3:o:siemens:multix_swing_firmware:*:*:*:*:*:*:*:* |
| siemens | multix_top_firmware |
All versions
cpe:2.3:o:siemens:multix_top_firmware:*:*:*:*:*:*:*:* |
| siemens | multix_top_acss_firmware |
All versions
cpe:2.3:o:siemens:multix_top_acss_firmware:*:*:*:*:*:*:*:* |
| siemens | multix_top_p_firmware |
All versions
cpe:2.3:o:siemens:multix_top_p_firmware:*:*:*:*:*:*:*:* |
| siemens | multix_top_acss_p_firmware |
All versions
cpe:2.3:o:siemens:multix_top_acss_p_firmware:*:*:*:*:*:*:*:* |
| siemens | vertix_solitaire_firmware |
All versions
cpe:2.3:o:siemens:vertix_solitaire_firmware:*:*:*:*:*:*:*:* |
| siemens | atellica_solution_firmware |
All versions
cpe:2.3:o:siemens:atellica_solution_firmware:*:*:*:*:*:*:*:* |
| siemens | aptio_firmware |
All versions
cpe:2.3:o:siemens:aptio_firmware:*:*:*:*:*:*:*:* |
| siemens | streamlab_firmware |
All versions
cpe:2.3:o:siemens:streamlab_firmware:*:*:*:*:*:*:*:* |
| siemens | centralink_firmware |
All versions
cpe:2.3:o:siemens:centralink_firmware:*:*:*:*:*:*:*:* |
| siemens | viva_e_firmware |
All versions
cpe:2.3:o:siemens:viva_e_firmware:*:*:*:*:*:*:*:* |
| siemens | viva_twin_firmware |
All versions
cpe:2.3:o:siemens:viva_twin_firmware:*:*:*:*:*:*:*:* |
| siemens | syngo_lab_process_manager |
All versions
cpe:2.3:a:siemens:syngo_lab_process_manager:*:*:*:*:*:*:*:* |
| siemens | rapidpoint_500_firmware |
<= 2.3.2 cpe:2.3:o:siemens:rapidpoint_500_firmware:*:*:*:*:*:*:*:* |
| siemens | lantis_firmware |
All versions
cpe:2.3:o:siemens:lantis_firmware:*:*:*:*:*:*:*:* |
| huawei | agile_controller-campus_firmware |
v100r002c00 v100r002c10 cpe:2.3:o:huawei:agile_controller-campus_firmware:v100r002c00:*:*:*:*:*:*:* |
| huawei | bh620_v2_firmware |
v100r002c00 cpe:2.3:o:huawei:bh620_v2_firmware:v100r002c00:*:*:*:*:*:*:* |
| huawei | bh621_v2_firmware |
v100r002c00 cpe:2.3:o:huawei:bh621_v2_firmware:v100r002c00:*:*:*:*:*:*:* |
| huawei | bh622_v2_firmware |
v100r001c00 cpe:2.3:o:huawei:bh622_v2_firmware:v100r001c00:*:*:*:*:*:*:* |
| huawei | bh640_v2_firmware |
v100r002c00 cpe:2.3:o:huawei:bh640_v2_firmware:v100r002c00:*:*:*:*:*:*:* |
| huawei | ch121_firmware |
v100r001c00 cpe:2.3:o:huawei:ch121_firmware:v100r001c00:*:*:*:*:*:*:* |
| huawei | ch140_firmware |
v100r001c00 cpe:2.3:o:huawei:ch140_firmware:v100r001c00:*:*:*:*:*:*:* |
| huawei | ch220_firmware |
v100r001c00 cpe:2.3:o:huawei:ch220_firmware:v100r001c00:*:*:*:*:*:*:* |
| huawei | ch221_firmware |
v100r001c00 cpe:2.3:o:huawei:ch221_firmware:v100r001c00:*:*:*:*:*:*:* |
| huawei | ch222_firmware |
v100r002c00 cpe:2.3:o:huawei:ch222_firmware:v100r002c00:*:*:*:*:*:*:* |
| huawei | ch240_firmware |
v100r001c00 cpe:2.3:o:huawei:ch240_firmware:v100r001c00:*:*:*:*:*:*:* |
| huawei | ch242_firmware |
v100r001c00 cpe:2.3:o:huawei:ch242_firmware:v100r001c00:*:*:*:*:*:*:* |
| huawei | ch242_v3_firmware |
v100r001c00 cpe:2.3:o:huawei:ch242_v3_firmware:v100r001c00:*:*:*:*:*:*:* |
| huawei | e6000_firmware |
v100r002c00 cpe:2.3:o:huawei:e6000_firmware:v100r002c00:*:*:*:*:*:*:* |
| huawei | e6000_chassis_firmware |
v100r001c00 cpe:2.3:o:huawei:e6000_chassis_firmware:v100r001c00:*:*:*:*:*:*:* |
| huawei | gtsoftx3000_firmware |
v200r001c01spc100 v200r002c00spc300 v200r002c10spc100 cpe:2.3:o:huawei:gtsoftx3000_firmware:v200r001c01spc100:*:*:*:*:*:*:* |
| huawei | oceanstor_18500_firmware |
v100r001c30spc300 cpe:2.3:o:huawei:oceanstor_18500_firmware:v100r001c30spc300:*:*:*:*:*:*:* |
| huawei | oceanstor_18800_firmware |
v100r001c30spc300 cpe:2.3:o:huawei:oceanstor_18800_firmware:v100r001c30spc300:*:*:*:*:*:*:* |
| huawei | oceanstor_18800f_firmware |
v100r001c30spc300 cpe:2.3:o:huawei:oceanstor_18800f_firmware:v100r001c30spc300:*:*:*:*:*:*:* |
| huawei | oceanstor_hvs85t_firmware |
v100r001c00 v100r001c30spc200 cpe:2.3:o:huawei:oceanstor_hvs85t_firmware:v100r001c00:*:*:*:*:*:*:* |
| huawei | oceanstor_hvs88t_firmware |
v100r001c00 v100r001c30spc200 cpe:2.3:o:huawei:oceanstor_hvs88t_firmware:v100r001c00:*:*:*:*:*:*:* |
| huawei | rh1288_v2_firmware |
v100r002c00 cpe:2.3:o:huawei:rh1288_v2_firmware:v100r002c00:*:*:*:*:*:*:* |
| huawei | rh1288a_v2_firmware |
v100r002c00 cpe:2.3:o:huawei:rh1288a_v2_firmware:v100r002c00:*:*:*:*:*:*:* |
Showing 50 of 68. Show the rest
| Vendor | Product | Affected versions |
|---|---|---|
| huawei | rh2265_v2_firmware |
v100r002c00 cpe:2.3:o:huawei:rh2265_v2_firmware:v100r002c00:*:*:*:*:*:*:* |
| huawei | rh2268_v2_firmware |
v100r002c00 cpe:2.3:o:huawei:rh2268_v2_firmware:v100r002c00:*:*:*:*:*:*:* |
| huawei | rh2285_v2_firmware |
v100r002c00 cpe:2.3:o:huawei:rh2285_v2_firmware:v100r002c00:*:*:*:*:*:*:* |
| huawei | rh2285h_v2_firmware |
v100r002c00 cpe:2.3:o:huawei:rh2285h_v2_firmware:v100r002c00:*:*:*:*:*:*:* |
| huawei | rh2288_v2_firmware |
v100r002c00 cpe:2.3:o:huawei:rh2288_v2_firmware:v100r002c00:*:*:*:*:*:*:* |
| huawei | rh2288a_v2_firmware |
v100r002c00 cpe:2.3:o:huawei:rh2288a_v2_firmware:v100r002c00:*:*:*:*:*:*:* |
| huawei | rh2288e_v2_firmware |
v100r002c00 cpe:2.3:o:huawei:rh2288e_v2_firmware:v100r002c00:*:*:*:*:*:*:* |
| huawei | rh2288h_v2_firmware |
v100r002c00 cpe:2.3:o:huawei:rh2288h_v2_firmware:v100r002c00:*:*:*:*:*:*:* |
| huawei | rh2485_v2_firmware |
v100r002c00 cpe:2.3:o:huawei:rh2485_v2_firmware:v100r002c00:*:*:*:*:*:*:* |
| huawei | rh5885_v2_firmware |
v100r001c00 cpe:2.3:o:huawei:rh5885_v2_firmware:v100r001c00:*:*:*:*:*:*:* |
| huawei | rh5885_v3_firmware |
v100r003c00 cpe:2.3:o:huawei:rh5885_v3_firmware:v100r003c00:*:*:*:*:*:*:* |
| huawei | smc2.0_firmware |
v500r002c00 v600r006c00 cpe:2.3:o:huawei:smc2.0_firmware:v500r002c00:*:*:*:*:*:*:* |
| huawei | seco_vsm_firmware |
v200r002c00 cpe:2.3:o:huawei:seco_vsm_firmware:v200r002c00:*:*:*:*:*:*:* |
| huawei | uma_firmware |
v200r001c00 v300r001c00 cpe:2.3:o:huawei:uma_firmware:v200r001c00:*:*:*:*:*:*:* |
| huawei | x6000_firmware |
v100r002c00 cpe:2.3:o:huawei:x6000_firmware:v100r002c00:*:*:*:*:*:*:* |
| huawei | x8000_firmware |
v100r002c20 cpe:2.3:o:huawei:x8000_firmware:v100r002c20:*:*:*:*:*:*:* |
| huawei | elog_firmware |
v200r003c10 cpe:2.3:o:huawei:elog_firmware:v200r003c10:*:*:*:*:*:*:* |
| huawei | espace_ecs_firmware |
v300r001c00 cpe:2.3:o:huawei:espace_ecs_firmware:v300r001c00:*:*:*:*:*:*:* |
Original advisory text
Microsoft Remote Desktop Services Remote Code Execution Vulnerability
Microsoft Remote Desktop Services, formerly known as Terminal Service, contains an unspecified vulnerability that allows an unauthenticated attacker to connect to the target system using RDP and send specially crafted requests. Successful exploitation allows for remote code execution. The vulnerability is also known under the moniker of BlueKeep.
References
- http://packetstormsecurity.com/files/153133/Microsoft-Windows-Remote-Desktop-Blu... Exploit Third Party Advisory VDB Entry
- http://packetstormsecurity.com/files/153627/Microsoft-Windows-RDP-BlueKeep-Denia... Exploit Third Party Advisory VDB Entry
- http://packetstormsecurity.com/files/154579/BlueKeep-RDP-Remote-Windows-Kernel-U... Exploit Third Party Advisory VDB Entry
- http://packetstormsecurity.com/files/155389/Microsoft-Windows-7-x86-BlueKeep-RDP... Third Party Advisory VDB Entry
- http://packetstormsecurity.com/files/162960/Microsoft-RDP-Remote-Code-Execution.... Exploit Third Party Advisory VDB Entry
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190529-01-windows... Third Party Advisory
- http://www.huawei.com/en/psirt/security-notices/huawei-sn-20190515-01-windows-en Third Party Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-166360.pdf Third Party Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-406175.pdf Third Party Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-433987.pdf Third Party Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-616199.pdf Third Party Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-832947.pdf Third Party Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-932041.pdf Third Party Advisory
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0708 Patch Vendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-... US Government Resource
Internet-facing
3 days
and check for signs of compromise
Internal
3 days
and check for signs of compromise
- Known to be exploited
- Can be exploited automatically
- Gives an attacker full control
Severity
9.8
Critical
Known exploited
Listed in the CISA KEV catalogue - exploitation confirmed in the wild.
>99%
chance of attack within 30 days
Type
CWE-416Use After Free
Timeline
Published16 May 2019
Updated30 Sep 2026
First seen6 Mar 2026
Track software like this
Free during beta