CVE-2019-0708 Information
Share on:Description
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests aka ‘Remote Desktop Services Remote Code Execution Vulnerability’.
CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Reference
http://packetstormsecurity.com/files/153133/Microsoft-Windows-Remote-Desktop-BlueKeep-Denial-Of-Service.html http://packetstormsecurity.com/files/153627/Microsoft-Windows-RDP-BlueKeep-Denial-Of-Service.html http://packetstormsecurity.com/files/154579/BlueKeep-RDP-Remote-Windows-Kernel-Use-After-Free.html http://packetstormsecurity.com/files/155389/Microsoft-Windows-7-x86-BlueKeep-RDP-Use-After-Free.html http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190529-01-windows-en http://www.huawei.com/en/psirt/security-notices/huawei-sn-20190515-01-windows-en https://cert-portal.siemens.com/productcert/pdf/ssa-166360.pdf https://cert-portal.siemens.com/productcert/pdf/ssa-406175.pdf https://cert-portal.siemens.com/productcert/pdf/ssa-433987.pdf https://cert-portal.siemens.com/productcert/pdf/ssa-616199.pdf https://cert-portal.siemens.com/productcert/pdf/ssa-832947.pdf https://cert-portal.siemens.com/productcert/pdf/ssa-932041.pdf https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0708
Attack Complexity
LOW
Privileges Required
NONE
User Interaction Required
NONE
Scope
NONE
Confidentiality Impact
UNCHANGED
Integrity Impact
HIGH
Availability Impact
HIGH
Base Score
HIGH
Base Severity
9.8