CVE Feed

    Dashboard / CVE / CVE-2019-0708

    CVE-2019-0708

    A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop Services Remote Code Execution Vulnerability'.

    Published:May 16, 2019
    Last Modified:Oct 29, 2025
    EPS:May 16, 2019
    EPSS Score:0.94445
    CVSS Score:9.8

    CISA Notification

    Description

    A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop Services Remote Code Execution Vulnerability'.

    Required Action:

    Apply updates per vendor instructions.

    Notes:

    No extra notes provided.

    Due Date
    May 3, 2022
    1592 days ago
    Alert Date
    Nov 3, 2021
    1773 days ago

    Affected Products

    Vendor
    Huawei
    Product
    Agile Controller-campus
    Vendor
    Huawei
    Product
    Agile Controller-campus Firmware
    Vendor
    Huawei
    Product
    Bh620 V2
    Vendor
    Huawei
    Product
    Bh620 V2 Firmware
    Vendor
    Huawei
    Product
    Bh621 V2
    Vendor
    Huawei
    Product
    Bh621 V2 Firmware
    Vendor
    Huawei
    Product
    Bh622 V2
    Vendor
    Huawei
    Product
    Bh622 V2 Firmware
    Vendor
    Huawei
    Product
    Bh640 V2
    Vendor
    Huawei
    Product
    Bh640 V2 Firmware
    Vendor
    Huawei
    Product
    Ch121
    Vendor
    Huawei
    Product
    Ch121 Firmware
    Vendor
    Huawei
    Product
    Ch140
    Vendor
    Huawei
    Product
    Ch140 Firmware
    Vendor
    Huawei
    Product
    Ch220
    Vendor
    Huawei
    Product
    Ch220 Firmware
    Vendor
    Huawei
    Product
    Ch221
    Vendor
    Huawei
    Product
    Ch221 Firmware
    Vendor
    Huawei
    Product
    Ch222
    Vendor
    Huawei
    Product
    Ch222 Firmware
    Vendor
    Huawei
    Product
    Ch240
    Vendor
    Huawei
    Product
    Ch240 Firmware
    Vendor
    Huawei
    Product
    Ch242
    Vendor
    Huawei
    Product
    Ch242 Firmware
    Vendor
    Huawei
    Product
    Ch242 V3
    Vendor
    Huawei
    Product
    Ch242 V3 Firmware
    Vendor
    Huawei
    Product
    E6000
    Vendor
    Huawei
    Product
    E6000 Chassis
    Vendor
    Huawei
    Product
    E6000 Chassis Firmware
    Vendor
    Huawei
    Product
    E6000 Firmware
    Vendor
    Huawei
    Product
    Elog
    Vendor
    Huawei
    Product
    Elog Firmware
    Vendor
    Huawei
    Product
    Espace Ecs
    Vendor
    Huawei
    Product
    Espace Ecs Firmware
    Vendor
    Huawei
    Product
    Gtsoftx3000
    Vendor
    Huawei
    Product
    Gtsoftx3000 Firmware
    Vendor
    Huawei
    Product
    Oceanstor 18500
    Vendor
    Huawei
    Product
    Oceanstor 18500 Firmware
    Vendor
    Huawei
    Product
    Oceanstor 18800
    Vendor
    Huawei
    Product
    Oceanstor 18800 Firmware
    Vendor
    Huawei
    Product
    Oceanstor 18800f
    Vendor
    Huawei
    Product
    Oceanstor 18800f Firmware
    Vendor
    Huawei
    Product
    Oceanstor Hvs85t
    Vendor
    Huawei
    Product
    Oceanstor Hvs85t Firmware
    Vendor
    Huawei
    Product
    Oceanstor Hvs88t
    Vendor
    Huawei
    Product
    Oceanstor Hvs88t Firmware
    Vendor
    Huawei
    Product
    Rh1288 V2
    Vendor
    Huawei
    Product
    Rh1288 V2 Firmware
    Vendor
    Huawei
    Product
    Rh1288a V2
    Vendor
    Huawei
    Product
    Rh1288a V2 Firmware
    Vendor
    Huawei
    Product
    Rh2265 V2
    Vendor
    Huawei
    Product
    Rh2265 V2 Firmware
    Vendor
    Huawei
    Product
    Rh2268 V2
    Vendor
    Huawei
    Product
    Rh2268 V2 Firmware
    Vendor
    Huawei
    Product
    Rh2285 V2
    Vendor
    Huawei
    Product
    Rh2285 V2 Firmware
    Vendor
    Huawei
    Product
    Rh2285h V2
    Vendor
    Huawei
    Product
    Rh2285h V2 Firmware
    Vendor
    Huawei
    Product
    Rh2288 V2
    Vendor
    Huawei
    Product
    Rh2288 V2 Firmware
    Vendor
    Huawei
    Product
    Rh2288a V2
    Vendor
    Huawei
    Product
    Rh2288a V2 Firmware
    Vendor
    Huawei
    Product
    Rh2288e V2
    Vendor
    Huawei
    Product
    Rh2288e V2 Firmware
    Vendor
    Huawei
    Product
    Rh2288h V2
    Vendor
    Huawei
    Product
    Rh2288h V2 Firmware
    Vendor
    Huawei
    Product
    Rh2485 V2
    Vendor
    Huawei
    Product
    Rh2485 V2 Firmware
    Vendor
    Huawei
    Product
    Rh5885 V2
    Vendor
    Huawei
    Product
    Rh5885 V2 Firmware
    Vendor
    Huawei
    Product
    Rh5885 V3
    Vendor
    Huawei
    Product
    Rh5885 V3 Firmware
    Vendor
    Huawei
    Product
    Seco Vsm
    Vendor
    Huawei
    Product
    Seco Vsm Firmware
    Vendor
    Huawei
    Product
    Smc2.0
    Vendor
    Huawei
    Product
    Smc2.0 Firmware
    Vendor
    Huawei
    Product
    Uma
    Vendor
    Huawei
    Product
    Uma Firmware
    Vendor
    Huawei
    Product
    X6000
    Vendor
    Huawei
    Product
    X6000 Firmware
    Vendor
    Huawei
    Product
    X8000
    Vendor
    Huawei
    Product
    X8000 Firmware
    Vendor
    Microsoft
    Product
    Windows 7
    Vendor
    Microsoft
    Product
    Windows Server 2008
    Vendor
    Siemens
    Product
    Aptio
    Vendor
    Siemens
    Product
    Aptio Firmware
    Vendor
    Siemens
    Product
    Atellica Solution
    Vendor
    Siemens
    Product
    Atellica Solution Firmware
    Vendor
    Siemens
    Product
    Axiom Multix M
    Vendor
    Siemens
    Product
    Axiom Multix M Firmware
    Vendor
    Siemens
    Product
    Axiom Vertix Md Trauma
    Vendor
    Siemens
    Product
    Axiom Vertix Md Trauma Firmware
    Vendor
    Siemens
    Product
    Axiom Vertix Solitaire M
    Vendor
    Siemens
    Product
    Axiom Vertix Solitaire M Firmware
    Vendor
    Siemens
    Product
    Centralink
    Vendor
    Siemens
    Product
    Centralink Firmware
    Vendor
    Siemens
    Product
    Lantis
    Vendor
    Siemens
    Product
    Lantis Firmware
    Vendor
    Siemens
    Product
    Mobilett Xp Digital
    Vendor
    Siemens
    Product
    Mobilett Xp Digital Firmware
    Vendor
    Siemens
    Product
    Multix Pro
    Vendor
    Siemens
    Product
    Multix Pro Acss
    Vendor
    Siemens
    Product
    Multix Pro Acss Firmware
    Vendor
    Siemens
    Product
    Multix Pro Acss P
    Vendor
    Siemens
    Product
    Multix Pro Acss P Firmware
    Vendor
    Siemens
    Product
    Multix Pro Firmware
    Vendor
    Siemens
    Product
    Multix Pro Navy
    Vendor
    Siemens
    Product
    Multix Pro Navy Firmware
    Vendor
    Siemens
    Product
    Multix Pro P
    Vendor
    Siemens
    Product
    Multix Pro P Firmware
    Vendor
    Siemens
    Product
    Multix Swing
    Vendor
    Siemens
    Product
    Multix Swing Firmware
    Vendor
    Siemens
    Product
    Multix Top
    Vendor
    Siemens
    Product
    Multix Top Acss
    Vendor
    Siemens
    Product
    Multix Top Acss Firmware
    Vendor
    Siemens
    Product
    Multix Top Acss P
    Vendor
    Siemens
    Product
    Multix Top Acss P Firmware
    Vendor
    Siemens
    Product
    Multix Top Firmware
    Vendor
    Siemens
    Product
    Multix Top P
    Vendor
    Siemens
    Product
    Multix Top P Firmware
    Vendor
    Siemens
    Product
    Rapidpoint 500
    Vendor
    Siemens
    Product
    Rapidpoint 500 Firmware
    Vendor
    Siemens
    Product
    Streamlab
    Vendor
    Siemens
    Product
    Streamlab Firmware
    Vendor
    Siemens
    Product
    Syngo Lab Process Manager
    Vendor
    Siemens
    Product
    Vertix Solitaire
    Vendor
    Siemens
    Product
    Vertix Solitaire Firmware
    Vendor
    Siemens
    Product
    Viva E
    Vendor
    Siemens
    Product
    Viva E Firmware
    Vendor
    Siemens
    Product
    Viva Twin
    Vendor
    Siemens
    Product
    Viva Twin Firmware

    Exploits

    http://packetstormsecurity.com/files/153133/Microsoft-Windows-Remote-Desktop-BlueKeep-Denial-Of-Service.htmlhttp://packetstormsecurity.com/files/153627/Microsoft-Windows-RDP-BlueKeep-Denial-Of-Service.htmlhttp://packetstormsecurity.com/files/154579/BlueKeep-RDP-Remote-Windows-Kernel-Use-After-Free.htmlhttp://packetstormsecurity.com/files/162960/Microsoft-RDP-Remote-Code-Execution.htmlhttp://packetstormsecurity.com/files/153133/Microsoft-Windows-Remote-Desktop-BlueKeep-Denial-Of-Service.htmlhttp://packetstormsecurity.com/files/153627/Microsoft-Windows-RDP-BlueKeep-Denial-Of-Service.htmlhttp://packetstormsecurity.com/files/154579/BlueKeep-RDP-Remote-Windows-Kernel-Use-After-Free.htmlhttp://packetstormsecurity.com/files/162960/Microsoft-RDP-Remote-Code-Execution.htmlhttps://www.exploit-db.com/exploits/46946https://github.com/0x6b7966/CVE-2019-0708-RCEhttps://github.com/0xeb-bp/bluekeephttps://github.com/0xFlag/CVE-2019-0708-testhttps://github.com/1aa87148377/CVE-2019-0708https://github.com/303sec/CVE-2019-0708https://github.com/AaronCaiii/CVE-2019-0708-POChttps://github.com/AdministratorGithub/CVE-2019-0708https://github.com/adyanamul/Remote-Code-Execution-RCE-Exploit-BlueKeep-CVE-2019-0708-PoChttps://github.com/algo7/bluekeep_CVE-2019-0708_poc_to_exploithttps://github.com/Ameg-yag/Wincrashhttps://github.com/andripwn/CVE-2019-0708https://github.com/anquanscan/CVE-2019-0708https://github.com/areusecure/CVE-2019-0708https://github.com/at0mik/CVE-2019-0708-PoChttps://github.com/Ayomide-29/bluekeep_metasploit_practicehttps://github.com/ayomideadams61-hub/bluekeep-metsploitable-labhttps://github.com/Barry-McCockiner/CVE-2019-0708https://github.com/benhe119/bluekeepscanhttps://github.com/bibo318/kali-CVE-2019-0708-labhttps://github.com/biggerwing/CVE-2019-0708-pochttps://github.com/blacksunwen/CVE-2019-0708https://github.com/blockchainguard/CVE-2019-0708https://github.com/cbwang505/CVE-2019-0708-EXP-Windowshttps://github.com/CircuitSoul/CVE-2019-0708https://github.com/closethe/CVE-2019-0708-POChttps://github.com/coolboy4me/cve-2019-0708_bluekeep_rcehttps://github.com/CPT-Jack-A-Castle/Haruster-CVE-2019-0708-Exploithttps://github.com/cream-sec/CVE-2019-0708-Msf--https://github.com/cve-2019-0708-poc/cve-2019-0708https://github.com/cvencoder/cve-2019-0708https://github.com/Cyb0r9/ispyhttps://github.com/davidfortytwo/bluekeephttps://github.com/DeathStroke-source/Mass-scanner-for-CVE-2019-0708-RDP-RCE-Exploithttps://github.com/denuwanjayasekara/CVE-Exploitation-Reportshttps://github.com/DenuwanJayasekara/CVE-Exploitation-Reportshttps://github.com/distance-vector/CVE-2019-0708https://github.com/dorkerdevil/Remote-Desktop-Services-Remote-Code-Execution-Vulnerability-CVE-2019-0708-https://github.com/eastmountyxz/CVE-2019-0708-Windowshttps://github.com/edvacco/CVE-2019-0708-POChttps://github.com/Ekultek/BlueKeephttps://github.com/emmadej1234/bluekeep-metasploit-lab-projecthttps://github.com/f8al/CVE-2019-0708-POChttps://github.com/fourtwizzy/CVE-2019-0708-Check-Device-Patch-Statushttps://github.com/freeide/CVE-2019-0708https://github.com/freeide/CVE-2019-0708-PoC-Exploithttps://github.com/FrostsaberX/CVE-2019-0708https://github.com/Gh0st0ne/rdpscan-BlueKeephttps://github.com/gildaaa/CVE-2019-0708https://github.com/go-bi/CVE-2019-0708-EXP-Windowshttps://github.com/gobysec/CVE-2019-0708https://github.com/GopeshKachhadiya/Windows-2https://github.com/gousseine-systems/vuln-rabilit-windows7https://github.com/HackerJ0e/CVE-2019-0708https://github.com/haishanzheng/CVE-2019-0708-generate-hostshttps://github.com/herhe/CVE-2019-0708pochttps://github.com/hook-s3c/CVE-2019-0708-pochttps://github.com/hotdog777714/RDS_CVE-2019-0708https://github.com/ht0Ruial/CVE-2019-0708Poc-BatchScanninghttps://github.com/hualy13/CVE-2019-0708-Checkhttps://github.com/HynekPetrak/detect_bluekeep.pyhttps://github.com/infenet/CVE-2019-0708https://github.com/infiniti-team/CVE-2019-0708https://github.com/isabelacostaz/CVE-2019-0708-POChttps://github.com/Jaky5155/cve-2019-0708-exphttps://github.com/JasonLOU/CVE-2019-0708https://github.com/jiansiting/CVE-2019-0708https://github.com/JSec1337/Scanner-CVE-2019-0708https://github.com/k8gege/CVE-2019-0708https://github.com/l9c/rdp0708scannerhttps://github.com/Leoid/CVE-2019-0708https://github.com/lisinan988/CVE-2019-0708-scanhttps://github.com/major203/cve-2019-0708-scanhttps://github.com/mekhalleh/cve-2019-0708https://github.com/Micr067/CVE-2019-0708RDP-MSFhttps://github.com/Mohaimenul370/Perform-an-RDP-exploitation-using-the-BlueKeep-vulnerability-CVE-2019-0708-on-Windowshttps://github.com/n0auth/CVE-2019-0708https://github.com/n1xbyte/CVE-2019-0708https://github.com/nochemax/bLuEkEeP-GUIhttps://github.com/ntkernel0/CVE-2019-0708https://github.com/NullByteSuiteDevs/CVE-2019-0708https://github.com/Nweks/Bluekeep-Metasploit-Lab-Projecthttps://github.com/offensity/CVE-2019-0708https://github.com/oneoy/BlueKeephttps://github.com/p0p0p0/CVE-2019-0708-exploithttps://github.com/Pa55w0rd/CVE-2019-0708https://github.com/pry0cc/BlueKeepTrackerhttps://github.com/pry0cc/cve-2019-0708-2https://github.com/pywc/CVE-2019-0708https://github.com/qing-root/CVE-2019-0708-EXP-MSF-https://github.com/rasan2001/Microsoft-Remote-Desktop-Services-Remote-Code-Execution-Vulnerability-CVE-2019-0708https://github.com/Ravaan21/Bluekeep-Hunterhttps://github.com/RickGeex/msf-module-CVE-2019-0708https://github.com/RICSecLab/CVE-2019-0708https://github.com/robertdavidgraham/rdpscanhttps://github.com/rockmelodies/CVE-2019-0708-Exploithttps://github.com/Rostelecom-CERT/bluekeepscanhttps://github.com/ryan-ally/rdp0708scannerhttps://github.com/safly/CVE-2019-0708https://github.com/sbkcbig/CVE-2019-0708-EXPloithttps://github.com/sbkcbig/CVE-2019-0708-EXPloit-3389https://github.com/sbkcbig/CVE-2019-0708-Poc-exploithttps://github.com/SebasPV27/Explotacion-RCE-Pentesting-BlueKeep-CVE-2019-0708-https://github.com/sezayi1972/CVE-2019-0708https://github.com/ShadowBrokers-ExploitLeak/CVE-2019-0708https://github.com/SherlockSec/CVE-2019-0708https://github.com/skommando/CVE-2019-0708https://github.com/skyshell20082008/CVE-2019-0708-PoC-Hitting-Pathhttps://github.com/smallFunction/CVE-2019-0708-POChttps://github.com/SQLDebugger/CVE-2019-0708-Toolhttps://github.com/SugiB3o/Check-vuln-CVE-2019-0708https://github.com/syriusbughunt/CVE-2019-0708https://github.com/temp-user-2014/CVE-2019-0708https://github.com/thugcrowd/CVE-2019-0708https://github.com/tranqtruong/Detect-BlueKeephttps://github.com/ttsite/CVE-2019-0708https://github.com/ttsite/CVE-2019-0708-https://github.com/turingcompl33t/bluekeephttps://github.com/ulisesrc/-2-CVE-2019-0708https://github.com/umarfarook882/CVE-2019-0708https://github.com/UraSecTeam/CVE-2019-0708https://github.com/victor0013/CVE-2019-0708https://github.com/wdfcc/CVE-2019-0708https://github.com/worawit/CVE-2019-0708https://github.com/wqsemc/CVE-2019-0708https://github.com/xiyangzuishuai/Dark-Network-CVE-2019-0708https://github.com/yetiddbb/CVE-2019-0708-PoChttps://github.com/YSheldon/MS_T120https://github.com/yushiro/CVE-2019-0708https://github.com/ze0r/CVE-2019-0708-exphttps://github.com/ZhaoYukai/CVE-2019-0708https://github.com/ZhaoYukai/CVE-2019-0708-Batch-Blue-Screenhttps://github.com/zjw88282740/CVE-2019-0708-win7https://github.com/zoujialan/CVE-2019-0708-RCEhttps://www.exploit-db.com/exploits/47120https://www.exploit-db.com/exploits/47416https://www.exploit-db.com/exploits/47683

    Common Weakness Enumeration

    CWE-416 Use After Free

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    References

    http://packetstormsecurity.com/files/153133/Microsoft-Windows-Remote-Desktop-BlueKeep-Denial-Of-Service.html
    http://packetstormsecurity.com/files/153627/Microsoft-Windows-RDP-BlueKeep-Denial-Of-Service.html
    http://packetstormsecurity.com/files/154579/BlueKeep-RDP-Remote-Windows-Kernel-Use-After-Free.html
    http://packetstormsecurity.com/files/155389/Microsoft-Windows-7-x86-BlueKeep-RDP-Use-After-Free.html
    http://packetstormsecurity.com/files/162960/Microsoft-RDP-Remote-Code-Execution.html
    http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190529-01-windows-en
    http://www.huawei.com/en/psirt/security-notices/huawei-sn-20190515-01-windows-en
    https://cert-portal.siemens.com/productcert/pdf/ssa-166360.pdf
    https://cert-portal.siemens.com/productcert/pdf/ssa-406175.pdf
    https://cert-portal.siemens.com/productcert/pdf/ssa-433987.pdf
    https://cert-portal.siemens.com/productcert/pdf/ssa-616199.pdf
    https://cert-portal.siemens.com/productcert/pdf/ssa-832947.pdf
    https://cert-portal.siemens.com/productcert/pdf/ssa-932041.pdf
    https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0708
    http://packetstormsecurity.com/files/153133/Microsoft-Windows-Remote-Desktop-BlueKeep-Denial-Of-Service.html
    http://packetstormsecurity.com/files/153627/Microsoft-Windows-RDP-BlueKeep-Denial-Of-Service.html
    http://packetstormsecurity.com/files/154579/BlueKeep-RDP-Remote-Windows-Kernel-Use-After-Free.html
    http://packetstormsecurity.com/files/155389/Microsoft-Windows-7-x86-BlueKeep-RDP-Use-After-Free.html
    http://packetstormsecurity.com/files/162960/Microsoft-RDP-Remote-Code-Execution.html
    http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190529-01-windows-en
    http://www.huawei.com/en/psirt/security-notices/huawei-sn-20190515-01-windows-en
    https://cert-portal.siemens.com/productcert/pdf/ssa-166360.pdf
    https://cert-portal.siemens.com/productcert/pdf/ssa-406175.pdf
    https://cert-portal.siemens.com/productcert/pdf/ssa-433987.pdf
    https://cert-portal.siemens.com/productcert/pdf/ssa-616199.pdf
    https://cert-portal.siemens.com/productcert/pdf/ssa-832947.pdf
    https://cert-portal.siemens.com/productcert/pdf/ssa-932041.pdf
    https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0708
    https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-0708

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High