CVE-2019-0708 CRITICAL

Published: 2019-05-16 | Last Modified: 2026-06-17 | Status: Analyzed

Description

A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop Services Remote Code Execution Vulnerability'.

Additional Descriptions (1)

Existe una vulnerabilidad de ejecución remota de código en Remote Desktop Services, anteriormente conocido como Terminal Services, cuando un atacante no autenticado se conecta al sistema de destino mediante RDP y envía peticiones especialmente diseñadas, conocida como 'Remote Desktop Services Remote Code Execution Vulnerability'.

CVSS Metrics

Base Score: 9.8 (CRITICAL)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector	NETWORK
Attack Complexity	LOW
Privileges Required	NONE
User Interaction	NONE
Scope	UNCHANGED
Confidentiality Impact	HIGH
Integrity Impact	HIGH
Availability Impact	HIGH

Source: [email protected]

Type: Primary

Exploitability Score: 3.9

Impact Score: 5.9

Base Score: 10.0 (HIGH)

AV:N/AC:L/Au:N/C:C/I:C/A:C

Access Vector	NETWORK
Access Complexity	LOW
Authentication	NONE
Confidentiality Impact	COMPLETE
Integrity Impact	COMPLETE
Availability Impact	COMPLETE

Source: [email protected]

Type: Primary

Exploitability Score: 10.0

Impact Score: 10.0

Weaknesses

Source	Type	Description
[email protected]	Primary	en CWE-416
134c704f-9b21-4f2e-91b3-4a467353bcc0	Secondary	en CWE-416

Affected Products

Vendor	Product	Version	Update	Type
microsoft	windows_7	-	<built-in method update of dict object at 0x7e60a8a681c0>	Operating System
microsoft	windows_server_2008	-	<built-in method update of dict object at 0x7e61342e48c0>	Operating System
microsoft	windows_server_2008	r2	<built-in method update of dict object at 0x7e60a8a6b680>	Operating System
siemens	axiom_multix_m_firmware	*	<built-in method update of dict object at 0x7e60baa08340>	Operating System
siemens	axiom_vertix_md_trauma_firmware	*	<built-in method update of dict object at 0x7e60a8a6ac40>	Operating System
siemens	axiom_vertix_solitaire_m_firmware	*	<built-in method update of dict object at 0x7e60baa0b200>	Operating System
siemens	mobilett_xp_digital_firmware	*	<built-in method update of dict object at 0x7e60baa0b680>	Operating System
siemens	multix_pro_acss_p_firmware	*	<built-in method update of dict object at 0x7e60bbd61d00>	Operating System
siemens	multix_pro_p_firmware	*	<built-in method update of dict object at 0x7e61342e7e00>	Operating System
siemens	multix_pro_firmware	*	<built-in method update of dict object at 0x7e60a8a6a840>	Operating System
siemens	multix_pro_acss_firmware	*	<built-in method update of dict object at 0x7e60baa091c0>	Operating System
siemens	multix_pro_navy_firmware	*	<built-in method update of dict object at 0x7e60bbd60c40>	Operating System
siemens	multix_swing_firmware	*	<built-in method update of dict object at 0x7e60e8874f00>	Operating System
siemens	multix_top_firmware	*	<built-in method update of dict object at 0x7e60eb2185c0>	Operating System
siemens	multix_top_acss_firmware	*	<built-in method update of dict object at 0x7e60a8a6b340>	Operating System
siemens	multix_top_p_firmware	*	<built-in method update of dict object at 0x7e6112cb4580>	Operating System
siemens	multix_top_acss_p_firmware	*	<built-in method update of dict object at 0x7e60a8a6a7c0>	Operating System
siemens	vertix_solitaire_firmware	*	<built-in method update of dict object at 0x7e60bbd60340>	Operating System
siemens	atellica_solution_firmware	*	<built-in method update of dict object at 0x7e60bbd600c0>	Operating System
siemens	aptio_firmware	*	<built-in method update of dict object at 0x7e60e8875480>	Operating System
siemens	streamlab_firmware	*	<built-in method update of dict object at 0x7e60bbd62f00>	Operating System
siemens	centralink_firmware	*	<built-in method update of dict object at 0x7e60a8a6a580>	Operating System
siemens	viva_e_firmware	*	<built-in method update of dict object at 0x7e60a8a6b640>	Operating System
siemens	viva_twin_firmware	*	<built-in method update of dict object at 0x7e61342e4500>	Operating System
siemens	syngo_lab_process_manager	*	<built-in method update of dict object at 0x7e6112cb5900>	Application
siemens	rapidpoint_500_firmware	*	<built-in method update of dict object at 0x7e60a8a6a040>	Operating System
siemens	lantis_firmware	*	<built-in method update of dict object at 0x7e60baa09040>	Operating System
huawei	agile_controller-campus_firmware	v100r002c00	<built-in method update of dict object at 0x7e60a8a69800>	Operating System
huawei	agile_controller-campus_firmware	v100r002c10	<built-in method update of dict object at 0x7e60bbd61940>	Operating System
huawei	bh620_v2_firmware	v100r002c00	<built-in method update of dict object at 0x7e60bbd60cc0>	Operating System
huawei	bh621_v2_firmware	v100r002c00	<built-in method update of dict object at 0x7e60baa0ac00>	Operating System
huawei	bh622_v2_firmware	v100r001c00	<built-in method update of dict object at 0x7e60a8b7c100>	Operating System
huawei	bh640_v2_firmware	v100r002c00	<built-in method update of dict object at 0x7e60a8b7ce40>	Operating System
huawei	ch121_firmware	v100r001c00	<built-in method update of dict object at 0x7e60e8877340>	Operating System
huawei	ch140_firmware	v100r001c00	<built-in method update of dict object at 0x7e60a87b7c80>	Operating System
huawei	ch220_firmware	v100r001c00	<built-in method update of dict object at 0x7e60bb32a180>	Operating System
huawei	ch221_firmware	v100r001c00	<built-in method update of dict object at 0x7e60bb32bb40>	Operating System
huawei	ch222_firmware	v100r002c00	<built-in method update of dict object at 0x7e60bb32a040>	Operating System
huawei	ch240_firmware	v100r001c00	<built-in method update of dict object at 0x7e60a87b4480>	Operating System
huawei	ch242_firmware	v100r001c00	<built-in method update of dict object at 0x7e60baa09e00>	Operating System
huawei	ch242_v3_firmware	v100r001c00	<built-in method update of dict object at 0x7e60bb329640>	Operating System
huawei	e6000_firmware	v100r002c00	<built-in method update of dict object at 0x7e60bb328640>	Operating System
huawei	e6000_chassis_firmware	v100r001c00	<built-in method update of dict object at 0x7e60bb329480>	Operating System
huawei	gtsoftx3000_firmware	v200r001c01spc100	<built-in method update of dict object at 0x7e60bb32b8c0>	Operating System
huawei	gtsoftx3000_firmware	v200r002c00spc300	<built-in method update of dict object at 0x7e60bb329cc0>	Operating System
huawei	gtsoftx3000_firmware	v200r002c10spc100	<built-in method update of dict object at 0x7e60a87b7980>	Operating System
huawei	oceanstor_18500_firmware	v100r001c30spc300	<built-in method update of dict object at 0x7e60a87b6400>	Operating System
huawei	oceanstor_18800_firmware	v100r001c30spc300	<built-in method update of dict object at 0x7e60a87b7e00>	Operating System
huawei	oceanstor_18800f_firmware	v100r001c30spc300	<built-in method update of dict object at 0x7e60a87b6000>	Operating System
huawei	oceanstor_hvs85t_firmware	v100r001c00	<built-in method update of dict object at 0x7e60a87b6ec0>	Operating System
huawei	oceanstor_hvs85t_firmware	v100r001c30spc200	<built-in method update of dict object at 0x7e60a87b5ac0>	Operating System
huawei	oceanstor_hvs88t_firmware	v100r001c00	<built-in method update of dict object at 0x7e60a87b6780>	Operating System
huawei	oceanstor_hvs88t_firmware	v100r001c30spc200	<built-in method update of dict object at 0x7e60a87b5a40>	Operating System
huawei	rh1288_v2_firmware	v100r002c00	<built-in method update of dict object at 0x7e60a87b5200>	Operating System
huawei	rh1288a_v2_firmware	v100r002c00	<built-in method update of dict object at 0x7e60a87b64c0>	Operating System
huawei	rh2265_v2_firmware	v100r002c00	<built-in method update of dict object at 0x7e60baa0bf40>	Operating System
huawei	rh2268_v2_firmware	v100r002c00	<built-in method update of dict object at 0x7e61079caa40>	Operating System
huawei	rh2285_v2_firmware	v100r002c00	<built-in method update of dict object at 0x7e61079c9640>	Operating System
huawei	rh2285h_v2_firmware	v100r002c00	<built-in method update of dict object at 0x7e61079cb700>	Operating System
huawei	rh2288_v2_firmware	v100r002c00	<built-in method update of dict object at 0x7e610746a540>	Operating System
huawei	rh2288a_v2_firmware	v100r002c00	<built-in method update of dict object at 0x7e61079c9700>	Operating System
huawei	rh2288e_v2_firmware	v100r002c00	<built-in method update of dict object at 0x7e61079cbec0>	Operating System
huawei	rh2288h_v2_firmware	v100r002c00	<built-in method update of dict object at 0x7e61079c9bc0>	Operating System
huawei	rh2485_v2_firmware	v100r002c00	<built-in method update of dict object at 0x7e61079c8700>	Operating System
huawei	rh5885_v2_firmware	v100r001c00	<built-in method update of dict object at 0x7e61079cb140>	Operating System
huawei	rh5885_v3_firmware	v100r003c00	<built-in method update of dict object at 0x7e61079cbf40>	Operating System
huawei	smc2.0_firmware	v500r002c00	<built-in method update of dict object at 0x7e61079cbe40>	Operating System
huawei	smc2.0_firmware	v600r006c00	<built-in method update of dict object at 0x7e61079c9ac0>	Operating System
huawei	seco_vsm_firmware	v200r002c00	<built-in method update of dict object at 0x7e61079c9a00>	Operating System
huawei	uma_firmware	v200r001c00	<built-in method update of dict object at 0x7e6107469180>	Operating System
huawei	uma_firmware	v300r001c00	<built-in method update of dict object at 0x7e610746b540>	Operating System
huawei	x6000_firmware	v100r002c00	<built-in method update of dict object at 0x7e610746a900>	Operating System
huawei	x8000_firmware	v100r002c20	<built-in method update of dict object at 0x7e6107469400>	Operating System
huawei	elog_firmware	v200r003c10	<built-in method update of dict object at 0x7e6107468bc0>	Operating System
huawei	espace_ecs_firmware	v300r001c00	<built-in method update of dict object at 0x7e610746b680>	Operating System

Affected Configurations

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:microsoft:windows_7:-:sp1::::::`
Yes	`cpe:2.3:o:microsoft:windows_server_2008:-:sp2::::::`
Yes	`cpe:2.3:o:microsoft:windows_server_2008:r2:sp1::::::`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:siemens:axiom_multix_m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:siemens:axiom_multix_m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:siemens:axiom_vertix_md_trauma_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:siemens:axiom_vertix_md_trauma:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:siemens:axiom_vertix_solitaire_m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:siemens:axiom_vertix_solitaire_m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:siemens:mobilett_xp_digital_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:siemens:mobilett_xp_digital:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:siemens:multix_pro_acss_p_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:siemens:multix_pro_acss_p:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:siemens:multix_pro_p_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:siemens:multix_pro_p:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:siemens:multix_pro_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:siemens:multix_pro:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:siemens:multix_pro_acss_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:siemens:multix_pro_acss:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:siemens:multix_pro_navy_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:siemens:multix_pro_navy:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:siemens:multix_swing_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:siemens:multix_swing:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:siemens:multix_top_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:siemens:multix_top:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:siemens:multix_top_acss_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:siemens:multix_top_acss:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:siemens:multix_top_p_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:siemens:multix_top_p:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:siemens:multix_top_acss_p_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:siemens:multix_top_acss_p:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:siemens:vertix_solitaire_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:siemens:vertix_solitaire:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:siemens:atellica_solution_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:siemens:atellica_solution:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:siemens:aptio_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:siemens:aptio:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:siemens:streamlab_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:siemens:streamlab:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:siemens:centralink_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:siemens:centralink:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:siemens:viva_e_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:siemens:viva_e:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:siemens:viva_twin_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:siemens:viva_twin:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:a:siemens:syngo_lab_process_manager::::::::`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:siemens:rapidpoint_500_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:siemens:rapidpoint_500:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:siemens:lantis_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:siemens:lantis:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:huawei:agile_controller-campus_firmware:v100r002c00:::::::*`
Yes	`cpe:2.3:o:huawei:agile_controller-campus_firmware:v100r002c10:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:huawei:agile_controller-campus:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:huawei:bh620_v2_firmware:v100r002c00:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:huawei:bh620_v2:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:huawei:bh621_v2_firmware:v100r002c00:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:huawei:bh621_v2:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:huawei:bh622_v2_firmware:v100r001c00:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:huawei:bh622_v2:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:huawei:bh640_v2_firmware:v100r002c00:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:huawei:bh640_v2:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:huawei:ch121_firmware:v100r001c00:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:huawei:ch121:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:huawei:ch140_firmware:v100r001c00:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:huawei:ch140:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:huawei:ch220_firmware:v100r001c00:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:huawei:ch220:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:huawei:ch221_firmware:v100r001c00:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:huawei:ch221:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:huawei:ch222_firmware:v100r002c00:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:huawei:ch222:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:huawei:ch240_firmware:v100r001c00:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:huawei:ch240:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:huawei:ch242_firmware:v100r001c00:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:huawei:ch242:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:huawei:ch242_v3_firmware:v100r001c00:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:huawei:ch242_v3:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:huawei:e6000_firmware:v100r002c00:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:huawei:e6000:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:huawei:e6000_chassis_firmware:v100r001c00:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:huawei:e6000_chassis:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:huawei:gtsoftx3000_firmware:v200r001c01spc100:::::::*`
Yes	`cpe:2.3:o:huawei:gtsoftx3000_firmware:v200r002c00spc300:::::::*`
Yes	`cpe:2.3:o:huawei:gtsoftx3000_firmware:v200r002c10spc100:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:huawei:gtsoftx3000:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:huawei:oceanstor_18500_firmware:v100r001c30spc300:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:huawei:oceanstor_18500:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:huawei:oceanstor_18800_firmware:v100r001c30spc300:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:huawei:oceanstor_18800:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:huawei:oceanstor_18800f_firmware:v100r001c30spc300:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:huawei:oceanstor_18800f:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:huawei:oceanstor_hvs85t_firmware:v100r001c00:::::::*`
Yes	`cpe:2.3:o:huawei:oceanstor_hvs85t_firmware:v100r001c30spc200:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:huawei:oceanstor_hvs85t:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:huawei:oceanstor_hvs88t_firmware:v100r001c00:::::::*`
Yes	`cpe:2.3:o:huawei:oceanstor_hvs88t_firmware:v100r001c30spc200:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:huawei:oceanstor_hvs88t:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:huawei:rh1288_v2_firmware:v100r002c00:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:huawei:rh1288_v2:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:huawei:rh1288a_v2_firmware:v100r002c00:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:huawei:rh1288a_v2:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:huawei:rh2265_v2_firmware:v100r002c00:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:huawei:rh2265_v2:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:huawei:rh2268_v2_firmware:v100r002c00:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:huawei:rh2268_v2:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:huawei:rh2285_v2_firmware:v100r002c00:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:huawei:rh2285_v2:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:huawei:rh2285h_v2_firmware:v100r002c00:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:huawei:rh2285h_v2:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:huawei:rh2288_v2_firmware:v100r002c00:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:huawei:rh2288_v2:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:huawei:rh2288a_v2_firmware:v100r002c00:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:huawei:rh2288a_v2:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:huawei:rh2288e_v2_firmware:v100r002c00:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:huawei:rh2288e_v2:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:huawei:rh2288h_v2_firmware:v100r002c00:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:huawei:rh2288h_v2:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:huawei:rh2485_v2_firmware:v100r002c00:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:huawei:rh2485_v2:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:huawei:rh5885_v2_firmware:v100r001c00:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:huawei:rh5885_v2:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:huawei:rh5885_v3_firmware:v100r003c00:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:huawei:rh5885_v3:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:huawei:smc2.0_firmware:v500r002c00:::::::*`
Yes	`cpe:2.3:o:huawei:smc2.0_firmware:v600r006c00:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:huawei:smc2.0:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:huawei:seco_vsm_firmware:v200r002c00:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:huawei:seco_vsm:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:huawei:uma_firmware:v200r001c00:::::::*`
Yes	`cpe:2.3:o:huawei:uma_firmware:v300r001c00:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:huawei:uma:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:huawei:x6000_firmware:v100r002c00:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:huawei:x6000:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:huawei:x8000_firmware:v100r002c20:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:huawei:x8000:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:huawei:elog_firmware:v200r003c10:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:huawei:elog:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:huawei:espace_ecs_firmware:v300r001c00:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:huawei:espace_ecs:-:::::::*`

References

http://packetstormsecurity.com/files/153133/Microsoft-Windows-Remote-Desktop-BlueKeep-Denial-Of-Service.html
Source: [email protected]

Exploit Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/153627/Microsoft-Windows-RDP-BlueKeep-Denial-Of-Service.html
Source: [email protected]

Exploit Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/154579/BlueKeep-RDP-Remote-Windows-Kernel-Use-After-Free.html
Source: [email protected]

Exploit Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/155389/Microsoft-Windows-7-x86-BlueKeep-RDP-Use-After-Free.html
Source: [email protected]

Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/162960/Microsoft-RDP-Remote-Code-Execution.html
Source: [email protected]

Exploit Third Party Advisory VDB Entry
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190529-01-windows-en
Source: [email protected]

Third Party Advisory
http://www.huawei.com/en/psirt/security-notices/huawei-sn-20190515-01-windows-en
Source: [email protected]

Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-166360.pdf
Source: [email protected]

Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-406175.pdf
Source: [email protected]

Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-433987.pdf
Source: [email protected]

Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-616199.pdf
Source: [email protected]

Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-832947.pdf
Source: [email protected]

Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-932041.pdf
Source: [email protected]

Third Party Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0708
Source: [email protected]

Patch Vendor Advisory
http://packetstormsecurity.com/files/153133/Microsoft-Windows-Remote-Desktop-BlueKeep-Denial-Of-Service.html
Source: af854a3a-2127-422b-91ae-364da2661108

Exploit Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/153627/Microsoft-Windows-RDP-BlueKeep-Denial-Of-Service.html
Source: af854a3a-2127-422b-91ae-364da2661108

Exploit Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/154579/BlueKeep-RDP-Remote-Windows-Kernel-Use-After-Free.html
Source: af854a3a-2127-422b-91ae-364da2661108

Exploit Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/155389/Microsoft-Windows-7-x86-BlueKeep-RDP-Use-After-Free.html
Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/162960/Microsoft-RDP-Remote-Code-Execution.html
Source: af854a3a-2127-422b-91ae-364da2661108

Exploit Third Party Advisory VDB Entry
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190529-01-windows-en
Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory
http://www.huawei.com/en/psirt/security-notices/huawei-sn-20190515-01-windows-en
Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-166360.pdf
Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-406175.pdf
Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-433987.pdf
Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-616199.pdf
Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-832947.pdf
Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-932041.pdf
Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0708
Source: af854a3a-2127-422b-91ae-364da2661108

Patch Vendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-0708
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

US Government Resource