Critical severity9.8CISA KEVNVD Advisory· Published May 16, 2019· Updated Jun 17, 2026

CVE-2019-0708

Description

A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop Services Remote Code Execution Vulnerability'.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Siemens Foundation/Syngo Lab Process Manager
cpe:2.3:a:siemens:syngo_lab_process_manager:*:*:*:*:*:*:*:*
Huawei/Agile Controller Campus Firmware2 versions
cpe:2.3:o:huawei:agile_controller-campus_firmware:v100r002c00:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:huawei:agile_controller-campus_firmware:v100r002c00:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:agile_controller-campus_firmware:v100r002c10:*:*:*:*:*:*:*
Huawei/Bh620 V2 Firmware
cpe:2.3:o:huawei:bh620_v2_firmware:v100r002c00:*:*:*:*:*:*:*
Huawei/Bh621 V2 Firmware
cpe:2.3:o:huawei:bh621_v2_firmware:v100r002c00:*:*:*:*:*:*:*
Huawei/Bh622 V2 Firmware
cpe:2.3:o:huawei:bh622_v2_firmware:v100r001c00:*:*:*:*:*:*:*
Huawei/Bh640 V2 Firmware
cpe:2.3:o:huawei:bh640_v2_firmware:v100r002c00:*:*:*:*:*:*:*
Huawei/Ch121 Firmware
cpe:2.3:o:huawei:ch121_firmware:v100r001c00:*:*:*:*:*:*:*
Huawei/Ch140 Firmware
cpe:2.3:o:huawei:ch140_firmware:v100r001c00:*:*:*:*:*:*:*
Huawei/Ch220 Firmware
cpe:2.3:o:huawei:ch220_firmware:v100r001c00:*:*:*:*:*:*:*
Huawei/Ch221 Firmware
cpe:2.3:o:huawei:ch221_firmware:v100r001c00:*:*:*:*:*:*:*
Huawei/Ch222 Firmware
cpe:2.3:o:huawei:ch222_firmware:v100r002c00:*:*:*:*:*:*:*
Huawei/Ch240 Firmware
cpe:2.3:o:huawei:ch240_firmware:v100r001c00:*:*:*:*:*:*:*
Huawei/Ch242 Firmware
cpe:2.3:o:huawei:ch242_firmware:v100r001c00:*:*:*:*:*:*:*
Huawei/Ch242 V3 Firmware
cpe:2.3:o:huawei:ch242_v3_firmware:v100r001c00:*:*:*:*:*:*:*
Huawei/E6000 Chassis Firmware
cpe:2.3:o:huawei:e6000_chassis_firmware:v100r001c00:*:*:*:*:*:*:*
Huawei/E6000 Firmware
cpe:2.3:o:huawei:e6000_firmware:v100r002c00:*:*:*:*:*:*:*
Huawei/Elog Firmware
cpe:2.3:o:huawei:elog_firmware:v200r003c10:*:*:*:*:*:*:*
Huawei/Espace Ecs Firmware
cpe:2.3:o:huawei:espace_ecs_firmware:v300r001c00:*:*:*:*:*:*:*
Huawei/Gtsoftx3000 Firmware3 versions
cpe:2.3:o:huawei:gtsoftx3000_firmware:v200r001c01spc100:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:huawei:gtsoftx3000_firmware:v200r001c01spc100:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:gtsoftx3000_firmware:v200r002c00spc300:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:gtsoftx3000_firmware:v200r002c10spc100:*:*:*:*:*:*:*
Huawei/Oceanstor 18500 Firmware
cpe:2.3:o:huawei:oceanstor_18500_firmware:v100r001c30spc300:*:*:*:*:*:*:*
Huawei/Oceanstor 18800 Firmware
cpe:2.3:o:huawei:oceanstor_18800_firmware:v100r001c30spc300:*:*:*:*:*:*:*
Huawei/Oceanstor 18800f Firmware
cpe:2.3:o:huawei:oceanstor_18800f_firmware:v100r001c30spc300:*:*:*:*:*:*:*
Huawei/Oceanstor Hvs85t Firmware2 versions
cpe:2.3:o:huawei:oceanstor_hvs85t_firmware:v100r001c00:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:huawei:oceanstor_hvs85t_firmware:v100r001c00:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:oceanstor_hvs85t_firmware:v100r001c30spc200:*:*:*:*:*:*:*
Huawei/Oceanstor Hvs88t Firmware2 versions
cpe:2.3:o:huawei:oceanstor_hvs88t_firmware:v100r001c00:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:huawei:oceanstor_hvs88t_firmware:v100r001c00:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:oceanstor_hvs88t_firmware:v100r001c30spc200:*:*:*:*:*:*:*
Huawei/Rh1288 V2 Firmware
cpe:2.3:o:huawei:rh1288_v2_firmware:v100r002c00:*:*:*:*:*:*:*
Huawei/Tecal Rh1288 V2 Firmware
cpe:2.3:o:huawei:rh1288a_v2_firmware:v100r002c00:*:*:*:*:*:*:*
Huawei/Rh2265 V2 Firmware
cpe:2.3:o:huawei:rh2265_v2_firmware:v100r002c00:*:*:*:*:*:*:*
Huawei/Rh2268 V2 Firmware
cpe:2.3:o:huawei:rh2268_v2_firmware:v100r002c00:*:*:*:*:*:*:*
Huawei/Rh2285 V2 Firmware
cpe:2.3:o:huawei:rh2285_v2_firmware:v100r002c00:*:*:*:*:*:*:*
Huawei/Rh2285h V2 Firmware
cpe:2.3:o:huawei:rh2285h_v2_firmware:v100r002c00:*:*:*:*:*:*:*
Huawei/Rh2288 V2 Firmware
cpe:2.3:o:huawei:rh2288_v2_firmware:v100r002c00:*:*:*:*:*:*:*
Huawei/Tecal Rh2288 V2 Firmware
cpe:2.3:o:huawei:rh2288a_v2_firmware:v100r002c00:*:*:*:*:*:*:*
Huawei/Rh2288e V2 Firmware
cpe:2.3:o:huawei:rh2288e_v2_firmware:v100r002c00:*:*:*:*:*:*:*
Huawei/Rh2288h V2 Firmware
cpe:2.3:o:huawei:rh2288h_v2_firmware:v100r002c00:*:*:*:*:*:*:*
Huawei/Rh2485 V2 Firmware
cpe:2.3:o:huawei:rh2485_v2_firmware:v100r002c00:*:*:*:*:*:*:*
Huawei/Rh5885 V2 Firmware
cpe:2.3:o:huawei:rh5885_v2_firmware:v100r001c00:*:*:*:*:*:*:*
Huawei/Rh5885 V3 Firmware
cpe:2.3:o:huawei:rh5885_v3_firmware:v100r003c00:*:*:*:*:*:*:*
Huawei/Seco Vsm Firmware
cpe:2.3:o:huawei:seco_vsm_firmware:v200r002c00:*:*:*:*:*:*:*
Huawei/Smc2.0 Firmware2 versions
cpe:2.3:o:huawei:smc2.0_firmware:v500r002c00:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:huawei:smc2.0_firmware:v500r002c00:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:smc2.0_firmware:v600r006c00:*:*:*:*:*:*:*
Huawei/Uma Firmware2 versions
cpe:2.3:o:huawei:uma_firmware:v200r001c00:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:huawei:uma_firmware:v200r001c00:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:uma_firmware:v300r001c00:*:*:*:*:*:*:*
Huawei/X6000 Firmware
cpe:2.3:o:huawei:x6000_firmware:v100r002c00:*:*:*:*:*:*:*
Huawei/X8000 Firmware
cpe:2.3:o:huawei:x8000_firmware:v100r002c20:*:*:*:*:*:*:*
Microsoft/Windows 7
cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*
Microsoft/Windows Server 20082 versions
cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*
Siemens Foundation/Aptio Firmware
cpe:2.3:o:siemens:aptio_firmware:*:*:*:*:*:*:*:*
Siemens Foundation/Atellica Solution Firmware
cpe:2.3:o:siemens:atellica_solution_firmware:*:*:*:*:*:*:*:*
Siemens Foundation/Axiom Multix M Firmware
cpe:2.3:o:siemens:axiom_multix_m_firmware:*:*:*:*:*:*:*:*
Siemens Foundation/Axiom Vertix Md Trauma Firmware
cpe:2.3:o:siemens:axiom_vertix_md_trauma_firmware:*:*:*:*:*:*:*:*
Siemens Foundation/Axiom Vertix Solitaire M Firmware
cpe:2.3:o:siemens:axiom_vertix_solitaire_m_firmware:*:*:*:*:*:*:*:*
Siemens Foundation/Centralink Firmware
cpe:2.3:o:siemens:centralink_firmware:*:*:*:*:*:*:*:*
Siemens Foundation/Lantis Firmware
cpe:2.3:o:siemens:lantis_firmware:*:*:*:*:*:*:*:*
Siemens Foundation/Mobilett Xp Digital Firmware
cpe:2.3:o:siemens:mobilett_xp_digital_firmware:*:*:*:*:*:*:*:*
Siemens Foundation/Multix Pro Acss Firmware
cpe:2.3:o:siemens:multix_pro_acss_firmware:*:*:*:*:*:*:*:*
Siemens Foundation/Multix Pro Acss P Firmware
cpe:2.3:o:siemens:multix_pro_acss_p_firmware:*:*:*:*:*:*:*:*
Siemens Foundation/Multix Pro Firmware
cpe:2.3:o:siemens:multix_pro_firmware:*:*:*:*:*:*:*:*
Siemens Foundation/Multix Pro Navy Firmware
cpe:2.3:o:siemens:multix_pro_navy_firmware:*:*:*:*:*:*:*:*
Siemens Foundation/Multix Pro P Firmware
cpe:2.3:o:siemens:multix_pro_p_firmware:*:*:*:*:*:*:*:*
Siemens Foundation/Multix Swing Firmware
cpe:2.3:o:siemens:multix_swing_firmware:*:*:*:*:*:*:*:*
Siemens Foundation/Multix Top Acss Firmware
cpe:2.3:o:siemens:multix_top_acss_firmware:*:*:*:*:*:*:*:*
Siemens Foundation/Multix Top Acss P Firmware
cpe:2.3:o:siemens:multix_top_acss_p_firmware:*:*:*:*:*:*:*:*
Siemens Foundation/Multix Top Firmware
cpe:2.3:o:siemens:multix_top_firmware:*:*:*:*:*:*:*:*
Siemens Foundation/Multix Top P Firmware
cpe:2.3:o:siemens:multix_top_p_firmware:*:*:*:*:*:*:*:*
Siemens Foundation/Rapidpoint 500 Firmware
cpe:2.3:o:siemens:rapidpoint_500_firmware:*:*:*:*:*:*:*:*
Range: <=2.3.2
Siemens Foundation/Streamlab Firmware
cpe:2.3:o:siemens:streamlab_firmware:*:*:*:*:*:*:*:*
Siemens Foundation/Vertix Solitaire Firmware
cpe:2.3:o:siemens:vertix_solitaire_firmware:*:*:*:*:*:*:*:*
Siemens Foundation/Viva E Firmware
cpe:2.3:o:siemens:viva_e_firmware:*:*:*:*:*:*:*:*
Siemens Foundation/Viva Twin Firmware
cpe:2.3:o:siemens:viva_twin_firmware:*:*:*:*:*:*:*:*
Microsoft/Remote Desktop Servicesllm-fuzzy
Microsoft/Windows Server 2003cpe-rescue
Range: 2008 R2 for x64-based Systems Service Pack 1 (Core installation)
Microsoft/Windowsv5
Range: 7 for 32-bit Systems Service Pack 1

Patches

Vulnerability mechanics

References

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0708nvdPatchVendor Advisory
packetstormsecurity.com/files/153133/Microsoft-Windows-Remote-Desktop-BlueKeep-Denial-Of-Service.htmlnvdExploitThird Party AdvisoryVDB Entry
packetstormsecurity.com/files/153627/Microsoft-Windows-RDP-BlueKeep-Denial-Of-Service.htmlnvdExploitThird Party AdvisoryVDB Entry
packetstormsecurity.com/files/154579/BlueKeep-RDP-Remote-Windows-Kernel-Use-After-Free.htmlnvdExploitThird Party AdvisoryVDB Entry
packetstormsecurity.com/files/162960/Microsoft-RDP-Remote-Code-Execution.htmlnvdExploitThird Party AdvisoryVDB Entry
packetstormsecurity.com/files/155389/Microsoft-Windows-7-x86-BlueKeep-RDP-Use-After-Free.htmlnvdThird Party AdvisoryVDB Entry
www.huawei.com/en/psirt/security-advisories/huawei-sa-20190529-01-windows-ennvdThird Party Advisory
www.huawei.com/en/psirt/security-notices/huawei-sn-20190515-01-windows-ennvdThird Party Advisory
cert-portal.siemens.com/productcert/pdf/ssa-166360.pdfnvdThird Party Advisory
cert-portal.siemens.com/productcert/pdf/ssa-406175.pdfnvdThird Party Advisory
cert-portal.siemens.com/productcert/pdf/ssa-433987.pdfnvdThird Party Advisory
cert-portal.siemens.com/productcert/pdf/ssa-616199.pdfnvdThird Party Advisory
cert-portal.siemens.com/productcert/pdf/ssa-832947.pdfnvdThird Party Advisory
cert-portal.siemens.com/productcert/pdf/ssa-932041.pdfnvdThird Party Advisory
www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource

News mentions

ThreatsDay Bulletin: SMS Blaster Busts, OpenEMR Flaws, 600K Roblox Hacks and 25 More Stories
The Hacker News · Apr 30, 2026

cvss	0.637
epss	0.080
exploit	0.030
kev	0.120
patch	0.000
ransomware	0.060