IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API
9.8Crítica KEV Usada en ransomware

CVE-2019-0708Microsoft Remote Desktop Services Remote Code Execution Vulnerability

Microsoft Windows; Microsoft Windows Server Publicada: (hace 7 años)

Explotación conocida — Microsoft Remote Desktop Services Remote Code Execution Vulnerability

CISA confirmó el 03.11.2021 que esta vulnerabilidad se usa en ataques reales. Plazo para las agencias federales de EE. UU.: 03.05.2022.

Acción requerida: Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2019-0708

Descripción

A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop Services Remote Code Execution Vulnerability'.

Debilidad (CWE): CWE-416

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
huawei agile controller-campus firmware v100r002c00
huawei bh620 v2 firmware v100r002c00
huawei bh621 v2 firmware v100r002c00
huawei bh622 v2 firmware v100r001c00
huawei bh640 v2 firmware v100r002c00
huawei ch121 firmware v100r001c00
huawei ch140 firmware v100r001c00
huawei ch220 firmware v100r001c00
huawei ch221 firmware v100r001c00
huawei ch222 firmware v100r002c00
huawei ch240 firmware v100r001c00
huawei ch242 firmware v100r001c00
huawei ch242 v3 firmware v100r001c00
huawei e6000 chassis firmware v100r001c00
huawei e6000 firmware v100r002c00
huawei elog firmware v200r003c10
huawei espace ecs firmware v300r001c00
huawei gtsoftx3000 firmware v200r001c01spc100
huawei oceanstor 18500 firmware v100r001c30spc300
huawei oceanstor 18800 firmware v100r001c30spc300
huawei oceanstor 18800f firmware v100r001c30spc300
huawei oceanstor hvs85t firmware v100r001c00
huawei oceanstor hvs88t firmware v100r001c00
huawei rh1288 v2 firmware v100r002c00
huawei rh1288a v2 firmware v100r002c00
huawei rh2265 v2 firmware v100r002c00
huawei rh2268 v2 firmware v100r002c00
huawei rh2285 v2 firmware v100r002c00
huawei rh2285h v2 firmware v100r002c00
huawei rh2288 v2 firmware v100r002c00
huawei rh2288a v2 firmware v100r002c00
huawei rh2288e v2 firmware v100r002c00
huawei rh2288h v2 firmware v100r002c00
huawei rh2485 v2 firmware v100r002c00
huawei rh5885 v2 firmware v100r001c00
huawei rh5885 v3 firmware v100r003c00
huawei seco vsm firmware v200r002c00
huawei smc2.0 firmware v500r002c00
huawei uma firmware v200r001c00
huawei x6000 firmware v100r002c00
huawei x8000 firmware v100r002c20
Microsoft Windows 7 for 32-bit Systems Service Pack 1, 7 for x64-based Systems Service Pack 1
microsoft windows 7 —
Microsoft Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Core installation), 2008 R2 for Itanium-Based Systems Service Pack 1, 2008 R2 for x64-based Systems Service Pack 1, 2008 for 32-bit Systems Service Pack 2 (Core installation), 2008 for Itanium-Based Systems Service Pack 2, 2008 for 32-bit Systems Service Pack 2, 2008 for x64-based Systems Service Pack 2, 2008 for x64-based Systems Service Pack 2 (Core installation)
microsoft windows server 2008 r2
siemens aptio firmware —
siemens atellica solution firmware —
siemens axiom multix m firmware —
siemens axiom vertix md trauma firmware —
siemens axiom vertix solitaire m firmware —
siemens centralink firmware —
siemens lantis firmware —
siemens mobilett xp digital firmware —
siemens multix pro acss firmware —
siemens multix pro acss p firmware —
siemens multix pro firmware —
siemens multix pro navy firmware —
siemens multix pro p firmware —
siemens multix swing firmware —
siemens multix top acss firmware —
siemens multix top acss p firmware —
siemens multix top firmware —
siemens multix top p firmware —
siemens rapidpoint 500 firmware ≤ 2.3.2
siemens streamlab firmware —
siemens syngo lab process manager —
siemens vertix solitaire firmware —
siemens viva e firmware —
siemens viva twin firmware —

Referencias y parches

Coincidencias CPE (NVD) (60)
  • cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*
  • cpe:2.3:o:siemens:axiom_multix_m_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:siemens:axiom_vertix_md_trauma_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:siemens:axiom_vertix_solitaire_m_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:siemens:mobilett_xp_digital_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:siemens:multix_pro_acss_p_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:siemens:multix_pro_p_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:siemens:multix_pro_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:siemens:multix_pro_acss_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:siemens:multix_pro_navy_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:siemens:multix_swing_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:siemens:multix_top_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:siemens:multix_top_acss_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:siemens:multix_top_p_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:siemens:multix_top_acss_p_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:siemens:vertix_solitaire_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:siemens:atellica_solution_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:siemens:aptio_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:siemens:streamlab_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:siemens:centralink_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:siemens:viva_e_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:siemens:viva_twin_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:a:siemens:syngo_lab_process_manager:*:*:*:*:*:*:*:*
  • cpe:2.3:o:siemens:rapidpoint_500_firmware:*:*:*:*:*:*:*:* ≤ 2.3.2
  • cpe:2.3:o:siemens:lantis_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:huawei:agile_controller-campus_firmware:v100r002c00:*:*:*:*:*:*:*
  • cpe:2.3:o:huawei:agile_controller-campus_firmware:v100r002c10:*:*:*:*:*:*:*
  • cpe:2.3:o:huawei:bh620_v2_firmware:v100r002c00:*:*:*:*:*:*:*
  • cpe:2.3:o:huawei:bh621_v2_firmware:v100r002c00:*:*:*:*:*:*:*
  • cpe:2.3:o:huawei:bh622_v2_firmware:v100r001c00:*:*:*:*:*:*:*
  • cpe:2.3:o:huawei:bh640_v2_firmware:v100r002c00:*:*:*:*:*:*:*
  • cpe:2.3:o:huawei:ch121_firmware:v100r001c00:*:*:*:*:*:*:*
  • cpe:2.3:o:huawei:ch140_firmware:v100r001c00:*:*:*:*:*:*:*
  • cpe:2.3:o:huawei:ch220_firmware:v100r001c00:*:*:*:*:*:*:*
  • cpe:2.3:o:huawei:ch221_firmware:v100r001c00:*:*:*:*:*:*:*
  • cpe:2.3:o:huawei:ch222_firmware:v100r002c00:*:*:*:*:*:*:*
  • cpe:2.3:o:huawei:ch240_firmware:v100r001c00:*:*:*:*:*:*:*
  • cpe:2.3:o:huawei:ch242_firmware:v100r001c00:*:*:*:*:*:*:*
  • cpe:2.3:o:huawei:ch242_v3_firmware:v100r001c00:*:*:*:*:*:*:*
  • cpe:2.3:o:huawei:e6000_firmware:v100r002c00:*:*:*:*:*:*:*
  • cpe:2.3:o:huawei:e6000_chassis_firmware:v100r001c00:*:*:*:*:*:*:*
  • cpe:2.3:o:huawei:gtsoftx3000_firmware:v200r001c01spc100:*:*:*:*:*:*:*
  • cpe:2.3:o:huawei:gtsoftx3000_firmware:v200r002c00spc300:*:*:*:*:*:*:*
  • cpe:2.3:o:huawei:gtsoftx3000_firmware:v200r002c10spc100:*:*:*:*:*:*:*
  • cpe:2.3:o:huawei:oceanstor_18500_firmware:v100r001c30spc300:*:*:*:*:*:*:*
  • cpe:2.3:o:huawei:oceanstor_18800_firmware:v100r001c30spc300:*:*:*:*:*:*:*
  • cpe:2.3:o:huawei:oceanstor_18800f_firmware:v100r001c30spc300:*:*:*:*:*:*:*
  • cpe:2.3:o:huawei:oceanstor_hvs85t_firmware:v100r001c00:*:*:*:*:*:*:*
  • cpe:2.3:o:huawei:oceanstor_hvs85t_firmware:v100r001c30spc200:*:*:*:*:*:*:*
  • cpe:2.3:o:huawei:oceanstor_hvs88t_firmware:v100r001c00:*:*:*:*:*:*:*
  • cpe:2.3:o:huawei:oceanstor_hvs88t_firmware:v100r001c30spc200:*:*:*:*:*:*:*
  • cpe:2.3:o:huawei:rh1288_v2_firmware:v100r002c00:*:*:*:*:*:*:*
  • cpe:2.3:o:huawei:rh1288a_v2_firmware:v100r002c00:*:*:*:*:*:*:*
  • cpe:2.3:o:huawei:rh2265_v2_firmware:v100r002c00:*:*:*:*:*:*:*
  • cpe:2.3:o:huawei:rh2268_v2_firmware:v100r002c00:*:*:*:*:*:*:*
  • cpe:2.3:o:huawei:rh2285_v2_firmware:v100r002c00:*:*:*:*:*:*:*
  • cpe:2.3:o:huawei:rh2285h_v2_firmware:v100r002c00:*:*:*:*:*:*:*
  • cpe:2.3:o:huawei:rh2288_v2_firmware:v100r002c00:*:*:*:*:*:*:*

CVE recientes del mismo producto — Windows Server

9.8Crítica
CVE-2026-105016

Microsoft QUIC Remote Code Execution Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.

1.7%EPSS
6.5Media
CVE-2026-108129

Role: DNS Server Information Disclosure Vulnerability

Microsoft Windows 10 Version 1607; Microsoft Windows 10 Version 1809; Microsoft Windows 10 Version 21H2; Microsoft Windows 10 Version 22H2

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

1.1%EPSS