CVE-2019-0708
En bref Sévérité CRITICAL 9.8 Exploitation Exploitation connue (CISA KEV) · ajoutée le 2021-11-03 Exploitée selon l'ENISA depuis le 2021-11-03 EPSS EPSS 100.00 % · centile 100 (2026-10-27) État PUBLISHED Publiée 2019-05-16 Mise à jour 2025-10-21 Attribuée par microsoft Statut NVD Analyzed Description A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop Services Remote Code Execution Vulnerability'.
Scores Version Score Vecteur Évalué par CVSS 3.1 CRITICAL 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CISA-ADP CVSS 3.1 CRITICAL 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H NVD · nvd@nist.gov (Primary) CVSS 3.1 CRITICAL 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H NVD · 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary) CVSS 2.0 HIGH 10.0 AV:N/AC:L/Au:N/C:C/I:C/A:C NVD · nvd@nist.gov (Primary)
Faiblesses (CWE)
Références européennes
Avis du CERT-FR
Configurations affectées (CPE NVD) cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*cpe:2.3:o:siemens:axiom_multix_m_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:siemens:axiom_vertix_md_trauma_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:siemens:axiom_vertix_solitaire_m_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:siemens:mobilett_xp_digital_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:siemens:multix_pro_acss_p_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:siemens:multix_pro_p_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:siemens:multix_pro_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:siemens:multix_pro_acss_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:siemens:multix_pro_navy_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:siemens:multix_swing_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:siemens:multix_top_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:siemens:multix_top_acss_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:siemens:multix_top_p_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:siemens:multix_top_acss_p_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:siemens:vertix_solitaire_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:siemens:atellica_solution_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:siemens:aptio_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:siemens:streamlab_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:siemens:centralink_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:siemens:viva_e_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:siemens:viva_twin_firmware:*:*:*:*:*:*:*:*cpe:2.3:a:siemens:syngo_lab_process_manager:*:*:*:*:*:*:*:*cpe:2.3:o:siemens:rapidpoint_500_firmware:*:*:*:*:*:*:*:* ≤ 2.3.2cpe:2.3:o:siemens:lantis_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:huawei:agile_controller-campus_firmware:v100r002c00:*:*:*:*:*:*:*cpe:2.3:o:huawei:agile_controller-campus_firmware:v100r002c10:*:*:*:*:*:*:*cpe:2.3:o:huawei:bh620_v2_firmware:v100r002c00:*:*:*:*:*:*:*cpe:2.3:o:huawei:bh621_v2_firmware:v100r002c00:*:*:*:*:*:*:*cpe:2.3:o:huawei:bh622_v2_firmware:v100r001c00:*:*:*:*:*:*:*cpe:2.3:o:huawei:bh640_v2_firmware:v100r002c00:*:*:*:*:*:*:*cpe:2.3:o:huawei:ch121_firmware:v100r001c00:*:*:*:*:*:*:*cpe:2.3:o:huawei:ch140_firmware:v100r001c00:*:*:*:*:*:*:*cpe:2.3:o:huawei:ch220_firmware:v100r001c00:*:*:*:*:*:*:*cpe:2.3:o:huawei:ch221_firmware:v100r001c00:*:*:*:*:*:*:*cpe:2.3:o:huawei:ch222_firmware:v100r002c00:*:*:*:*:*:*:*cpe:2.3:o:huawei:ch240_firmware:v100r001c00:*:*:*:*:*:*:*cpe:2.3:o:huawei:ch242_firmware:v100r001c00:*:*:*:*:*:*:*+35 autres Produits affectés Produit Versions Microsoft · Windows affected 7 for 32-bit Systems Service Pack 1 ; affected 7 for x64-based Systems Service Pack 1 Microsoft · Windows Server affected 2008 R2 for x64-based Systems Service Pack 1 (Core installation) ; affected 2008 R2 for Itanium-Based Systems Service Pack 1 ; affected 2008 R2 for x64-based Systems Service Pack 1 ; affected 2008 for 32-bit Systems Service Pack 2 (Core installation) ; affected 2008 for Itanium-Based Systems Service Pack 2 ; affected 2008 for 32-bit Systems Service Pack 2
Références
Sources
