Back to CVE records
Critical 9.8Known exploited (CISA KEV)HealthcarePublished May 16, 2019
CVE-2019-0708A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends speciall…
Updated under an hour ago ()
Does this affect you?
It affects Microsoft Windows and 59 other products. Add what you run to find out whether that includes you.
CISA lists it as known exploited since Nov 3, 2021; federal agencies had to remediate by May 3, 2022, and it is known to be used in ransomware. Treat that date as your deadline.
Do this next
Start free and add your stack
Free account, 1 product
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop Services Remote Code Execution Vulnerability'.
- CVSS
- 9.8 CRITICAL (v3.1, CISA ADP)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- CWE-416
- Known exploited
- Added to CISA KEV Nov 3, 2021; federal remediation due May 3, 2022; known ransomware useApply updates per vendor instructions.
- EPSS (exploitation in the next 30 days)
- 100.00% (percentile 100)
- Assigned by
- microsoft
- NVD analysis
- Analyzed
- Record last updated
- Oct 21, 2025
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Microsoft Windows microsoft:windows (from the name) | 7 for 32-bit Systems Service Pack 1; 7 for x64-based Systems Service Pack 1 | CNA record |
Microsoft Windows Server microsoft:windows_server (from the name) | 2008 R2 for x64-based Systems Service Pack 1 (Core installation); 2008 R2 for Itanium-Based Systems Service Pack 1; 2008 R2 for x64-based Systems Service Pack 1; 2008 for 32-bit Systems Service Pack 2 (Core installation); 2008 for Itanium-Based Systems Service Pack 2; 2008 for 32-bit Systems Service Pack 2; 2008 for x64-based Systems Service Pack 2; 2008 for x64-based Systems Service Pack 2 (Core installation) | CNA record |
microsoft windows_7 microsoft:windows_7 | all versions | NVD |
microsoft windows_server_2008 microsoft:windows_server_2008 | all versions; r2 | NVD |
siemens axiom_multix_m_firmware siemens:axiom_multix_m_firmware | all versions | NVD |
siemens axiom_vertix_md_trauma_firmware siemens:axiom_vertix_md_trauma_firmware | all versions | NVD |
siemens axiom_vertix_solitaire_m_firmware siemens:axiom_vertix_solitaire_m_firmware | all versions | NVD |
siemens mobilett_xp_digital_firmware siemens:mobilett_xp_digital_firmware | all versions | NVD |
siemens multix_pro_acss_p_firmware siemens:multix_pro_acss_p_firmware | all versions | NVD |
siemens multix_pro_p_firmware siemens:multix_pro_p_firmware | all versions | NVD |
siemens multix_pro_firmware siemens:multix_pro_firmware | all versions | NVD |
siemens multix_pro_acss_firmware siemens:multix_pro_acss_firmware | all versions | NVD |
siemens multix_pro_navy_firmware siemens:multix_pro_navy_firmware | all versions | NVD |
siemens multix_swing_firmware siemens:multix_swing_firmware | all versions | NVD |
siemens multix_top_firmware siemens:multix_top_firmware | all versions | NVD |
siemens multix_top_acss_firmware siemens:multix_top_acss_firmware | all versions | NVD |
siemens multix_top_p_firmware siemens:multix_top_p_firmware | all versions | NVD |
siemens multix_top_acss_p_firmware siemens:multix_top_acss_p_firmware | all versions | NVD |
siemens vertix_solitaire_firmware siemens:vertix_solitaire_firmware | all versions | NVD |
siemens atellica_solution_firmware siemens:atellica_solution_firmware | all versions | NVD |
siemens aptio_firmware siemens:aptio_firmware | all versions | NVD |
siemens streamlab_firmware siemens:streamlab_firmware | all versions | NVD |
siemens centralink_firmware siemens:centralink_firmware | all versions | NVD |
siemens viva_e_firmware siemens:viva_e_firmware | all versions | NVD |
siemens viva_twin_firmware siemens:viva_twin_firmware | all versions | NVD |
siemens syngo_lab_process_manager siemens:syngo_lab_process_manager | all versions | NVD |
siemens rapidpoint_500_firmware siemens:rapidpoint_500_firmware | through 2.3.2 | NVD |
siemens lantis_firmware siemens:lantis_firmware | all versions | NVD |
huawei agile_controller-campus_firmware huawei:agile_controller-campus_firmware | v100r002c00; v100r002c10 | NVD |
huawei bh620_v2_firmware huawei:bh620_v2_firmware | v100r002c00 | NVD |
huawei bh621_v2_firmware huawei:bh621_v2_firmware | v100r002c00 | NVD |
huawei bh622_v2_firmware huawei:bh622_v2_firmware | v100r001c00 | NVD |
huawei bh640_v2_firmware huawei:bh640_v2_firmware | v100r002c00 | NVD |
huawei ch121_firmware huawei:ch121_firmware | v100r001c00 | NVD |
huawei ch140_firmware huawei:ch140_firmware | v100r001c00 | NVD |
huawei ch220_firmware huawei:ch220_firmware | v100r001c00 | NVD |
huawei ch221_firmware huawei:ch221_firmware | v100r001c00 | NVD |
huawei ch222_firmware huawei:ch222_firmware | v100r002c00 | NVD |
huawei ch240_firmware huawei:ch240_firmware | v100r001c00 | NVD |
huawei ch242_firmware huawei:ch242_firmware | v100r001c00 | NVD |
huawei ch242_v3_firmware huawei:ch242_v3_firmware | v100r001c00 | NVD |
huawei e6000_firmware huawei:e6000_firmware | v100r002c00 | NVD |
huawei e6000_chassis_firmware huawei:e6000_chassis_firmware | v100r001c00 | NVD |
huawei gtsoftx3000_firmware huawei:gtsoftx3000_firmware | v200r001c01spc100; v200r002c00spc300; v200r002c10spc100 | NVD |
huawei oceanstor_18500_firmware huawei:oceanstor_18500_firmware | v100r001c30spc300 | NVD |
huawei oceanstor_18800_firmware huawei:oceanstor_18800_firmware | v100r001c30spc300 | NVD |
huawei oceanstor_18800f_firmware huawei:oceanstor_18800f_firmware | v100r001c30spc300 | NVD |
huawei oceanstor_hvs85t_firmware huawei:oceanstor_hvs85t_firmware | v100r001c00; v100r001c30spc200 | NVD |
huawei oceanstor_hvs88t_firmware huawei:oceanstor_hvs88t_firmware | v100r001c00; v100r001c30spc200 | NVD |
huawei rh1288_v2_firmware huawei:rh1288_v2_firmware | v100r002c00 | NVD |
huawei rh1288a_v2_firmware huawei:rh1288a_v2_firmware | v100r002c00 | NVD |
huawei rh2265_v2_firmware huawei:rh2265_v2_firmware | v100r002c00 | NVD |
huawei rh2268_v2_firmware huawei:rh2268_v2_firmware | v100r002c00 | NVD |
huawei rh2285_v2_firmware huawei:rh2285_v2_firmware | v100r002c00 | NVD |
huawei rh2285h_v2_firmware huawei:rh2285h_v2_firmware | v100r002c00 | NVD |
huawei rh2288_v2_firmware huawei:rh2288_v2_firmware | v100r002c00 | NVD |
huawei rh2288a_v2_firmware huawei:rh2288a_v2_firmware | v100r002c00 | NVD |
huawei rh2288e_v2_firmware huawei:rh2288e_v2_firmware | v100r002c00 | NVD |
huawei rh2288h_v2_firmware huawei:rh2288h_v2_firmware | v100r002c00 | NVD |
huawei rh2485_v2_firmware huawei:rh2485_v2_firmware | v100r002c00 | NVD |
References
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0708x-refsource-misc, patch, vendor-advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-932041.pdfx-refsource-confirm, third-party-advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-616199.pdfx-refsource-confirm, third-party-advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-433987.pdfx-refsource-confirm, third-party-advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-832947.pdfx-refsource-confirm, third-party-advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-166360.pdfx-refsource-confirm, third-party-advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-406175.pdfx-refsource-confirm, third-party-advisory
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190529-01-windows-enx-refsource-confirm, third-party-advisory
- http://www.huawei.com/en/psirt/security-notices/huawei-sn-20190515-01-windows-enx-refsource-confirm, third-party-advisory
- http://packetstormsecurity.com/files/153133/Microsoft-Windows-Remote-Desktop-BlueKeep-Denial-Of-Service.htmlx-refsource-misc, exploit, third-party-advisory, vdb-entry
- http://packetstormsecurity.com/files/153627/Microsoft-Windows-RDP-BlueKeep-Denial-Of-Service.htmlx-refsource-misc, exploit, third-party-advisory, vdb-entry
- http://packetstormsecurity.com/files/154579/BlueKeep-RDP-Remote-Windows-Kernel-Use-After-Free.htmlx-refsource-misc, exploit, third-party-advisory, vdb-entry
- http://packetstormsecurity.com/files/155389/Microsoft-Windows-7-x86-BlueKeep-RDP-Use-After-Free.htmlx-refsource-misc, third-party-advisory, vdb-entry
- http://packetstormsecurity.com/files/162960/Microsoft-RDP-Remote-Code-Execution.htmlx-refsource-misc, exploit, third-party-advisory, vdb-entry
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-0708us-government-resource
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.