Vulnpedia
← All CVEs

CVE-2019-0708

CRITICAL 9.8 KNOWN EXPLOITED RANSOMWARE PoC CATALOGUED ALL-YEARS

Published 2019-05-16 · Last modified 2025-10-21 · microsoft · NVD: Analyzed

A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop Services Remote Code Execution Vulnerability'.

ACTIVELY EXPLOITED

Confirmed exploited in the wild — in CISA KEV since 2021-11-03, linked to ransomware campaigns. Patch or mitigate now.

Exploitation likelihood

100.0%chance of exploitation in 30 days · 100th percentile

● In CISA KEV (2021-11-03)● Catalogued PoC◆ SSVC: exploitation active, automatable yes

Impact if exploited

9.8CVSS 3.1 · CRITICAL · ADP

  • ConfidentialityHigh
  • IntegrityHigh
  • AvailabilityHigh

What an attacker needs

  • ✓Access: Reachable over the network — no local access needed
  • ✓Privileges: No account or privileges required
  • ✓User interaction: No user interaction needed
  • ✓Complexity: No special conditions — reliably repeatable

✓ lowers the bar for an attacker · ⚠ raises it

Proof of concept

Public PoC or exploit resources are catalogued below.

Listed by the named source; Vulnpedia has not tested these resources.

PoC data: JSON

Resource commands

searchsploit --cve CVE-2019-0708 && searchsploit -m 46946Fetch the ExploitDB PoC locally; review the code before running it.
searchsploit --cve CVE-2019-0708 && searchsploit -m 47120Fetch the ExploitDB PoC locally; review the code before running it.
searchsploit --cve CVE-2019-0708 && searchsploit -m 47416Fetch the ExploitDB PoC locally; review the code before running it.
searchsploit --cve CVE-2019-0708 && searchsploit -m 47683Fetch the ExploitDB PoC locally; review the code before running it.
curl -s https://vulnpedia.com/cve/CVE-2019-0708/poc.jsonMachine-readable PoC index for this CVE (for automation).

Search for new PoCs

Search GitHub now — results may be empty or unverified.

Tracked sources are checked weekly for the full archive, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.

Data snapshot:

Affected

Vendors Microsoft Siemens Huawei

Products Windows Windows Server Windows 7 Windows Server 2008 Axiom Multix M Firmware Axiom Multix M Axiom Vertix Md Trauma Firmware Axiom Vertix Md Trauma Axiom Vertix Solitaire M Firmware Axiom Vertix Solitaire M Mobilett Xp Digital Firmware Mobilett Xp Digital Multix Pro Acss P Firmware Multix Pro Acss P Multix Pro P Firmware Multix Pro P Multix Pro Firmware Multix Pro Multix Pro Acss Firmware Multix Pro Acss Multix Pro Navy Firmware Multix Pro Navy Multix Swing Firmware Multix Swing Multix Top Firmware Multix Top Multix Top Acss Firmware Multix Top Acss Multix Top P Firmware Multix Top P Multix Top Acss P Firmware Multix Top Acss P Vertix Solitaire Firmware Vertix Solitaire Atellica Solution Firmware Atellica Solution Aptio Firmware Aptio Streamlab Firmware Streamlab

Weakness (CWE)

  • CWE-416: Use After Free

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References and research data (JSON)

Unverified PoC candidates

Catalogue matches for further research. These repositories have not been validated as working exploits.

122 candidates

Additional exploitation reports

Source-specific reports, separate from CISA KEV. Repeated observations from one source are not independent confirmations.

38 more source reports

Known Affected Software Configurations

VendorProductVersion range
MicrosoftWindows 7*
MicrosoftWindows Server 2008*
MicrosoftWindows Server 2008r2
SiemensAxiom Multix M Firmware*
SiemensAxiom Vertix Md Trauma Firmware*
SiemensAxiom Vertix Solitaire M Firmware*
SiemensMobilett Xp Digital Firmware*
SiemensMultix Pro Acss P Firmware*
SiemensMultix Pro P Firmware*
SiemensMultix Pro Firmware*
SiemensMultix Pro Acss Firmware*
SiemensMultix Pro Navy Firmware*
SiemensMultix Swing Firmware*
SiemensMultix Top Firmware*
SiemensMultix Top Acss Firmware*
SiemensMultix Top P Firmware*
SiemensMultix Top Acss P Firmware*
SiemensVertix Solitaire Firmware*
SiemensAtellica Solution Firmware*
SiemensAptio Firmware*
SiemensStreamlab Firmware*
SiemensCentralink Firmware*
SiemensViva E Firmware*
SiemensViva Twin Firmware*
SiemensSyngo Lab Process Manager*
SiemensRapidpoint 500 Firmware≤ 2.3.2
SiemensLantis Firmware*
HuaweiAgile Controller Campus Firmwarev100r002c00
HuaweiAgile Controller Campus Firmwarev100r002c10
HuaweiBh620 V2 Firmwarev100r002c00
HuaweiBh621 V2 Firmwarev100r002c00
HuaweiBh622 V2 Firmwarev100r001c00
HuaweiBh640 V2 Firmwarev100r002c00
HuaweiCh121 Firmwarev100r001c00
HuaweiCh140 Firmwarev100r001c00
HuaweiCh220 Firmwarev100r001c00
HuaweiCh221 Firmwarev100r001c00
HuaweiCh222 Firmwarev100r002c00
HuaweiCh240 Firmwarev100r001c00
HuaweiCh242 Firmwarev100r001c00
HuaweiCh242 V3 Firmwarev100r001c00
HuaweiE6000 Firmwarev100r002c00
HuaweiE6000 Chassis Firmwarev100r001c00
HuaweiGtsoftx3000 Firmwarev200r001c01spc100
HuaweiGtsoftx3000 Firmwarev200r002c00spc300
HuaweiGtsoftx3000 Firmwarev200r002c10spc100
HuaweiOceanstor 18500 Firmwarev100r001c30spc300
HuaweiOceanstor 18800 Firmwarev100r001c30spc300
HuaweiOceanstor 18800f Firmwarev100r001c30spc300
HuaweiOceanstor Hvs85t Firmwarev100r001c00
HuaweiOceanstor Hvs85t Firmwarev100r001c30spc200
HuaweiOceanstor Hvs88t Firmwarev100r001c00
HuaweiOceanstor Hvs88t Firmwarev100r001c30spc200
HuaweiRh1288 V2 Firmwarev100r002c00
HuaweiRh1288a V2 Firmwarev100r002c00
HuaweiRh2265 V2 Firmwarev100r002c00
HuaweiRh2268 V2 Firmwarev100r002c00
HuaweiRh2285 V2 Firmwarev100r002c00
HuaweiRh2285h V2 Firmwarev100r002c00
HuaweiRh2288 V2 Firmwarev100r002c00
HuaweiRh2288a V2 Firmwarev100r002c00
HuaweiRh2288e V2 Firmwarev100r002c00
HuaweiRh2288h V2 Firmwarev100r002c00
HuaweiRh2485 V2 Firmwarev100r002c00
HuaweiRh5885 V2 Firmwarev100r001c00
HuaweiRh5885 V3 Firmwarev100r003c00
HuaweiSmc2.0 Firmwarev500r002c00
HuaweiSmc2.0 Firmwarev600r006c00
HuaweiSeco Vsm Firmwarev200r002c00
HuaweiUma Firmwarev200r001c00
HuaweiUma Firmwarev300r001c00
HuaweiX6000 Firmwarev100r002c00
HuaweiX8000 Firmwarev100r002c20
HuaweiElog Firmwarev200r003c10
HuaweiEspace Ecs Firmwarev300r001c00

All CVSS metrics

  • CRITICAL 9.8 v3.1 · ADP Primary
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
  • CRITICAL 9.8 v3.1 · NVD Primary
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
  • HIGH 10 v2.0 · NVD Primary
    AV:N/AC:L/Au:N/C:C/I:C/A:C

References

Exploit-tagged references (not proof of a PoC)

Patches & mitigations

Advisories

Technical & other

Sources: NVD · CVE.org · All sources and attribution · EPSS