CVE-2019-0708, also known as BlueKeep, is a critical remote code execution vulnerability affecting various Microsoft Windows systems, including both client and server versions. This vulnerability allows unauthenticated attackers to connect to the target system using Remote Desktop Services (RDP) and send specially crafted requests, potentially leading to arbitrary code execution on the affected system. With a severity rating of 9.8 out of 10, it is crucial for users to be aware of this vulnerability and take necessary precautions to protect their systems.

How do I know if I'm affected?

If you're wondering whether your system is affected by the vulnerability, also known as BlueKeep, you should check if you're using any of the following Microsoft Windows versions: Windows 7, Windows Server 2003, Windows Server 2008, Windows Vista, or Windows XP. This vulnerability is related to Remote Desktop Services (RDP) and can lead to remote code execution if an attacker sends specially crafted requests to your system. It's important to stay informed and take necessary precautions to protect your system from this critical vulnerability.

What should I do if I'm affected?

If you're affected by the vulnerability, follow these simple steps to protect your system. First, visit Microsoft's Security Update Guide for information on the patch or workaround. Apply the recommended security updates to your system. Stay vigilant and keep your software up-to-date to prevent potential attacks.

Is this in CISA’s Known Exploited Vulnerabilities Catalog?

Yes, CVE-2019-0708, also known as BlueKeep, is in CISA's Known Exploited Vulnerabilities Catalog. The vulnerability, named Microsoft Remote Desktop Services Remote Code Execution Vulnerability, was added on November 3, 2021, with a due date of May 3, 2022. The required action is to apply updates according to vendor instructions.

Weakness enumeration

The weakness enumeration for this vulnerability is categorized as CWE-416, known as BlueKeep, is associated with a Use After Free weakness, which can lead to remote code execution when exploited by an attacker.

For more details

CVE-2019-0708, also known as BlueKeep, is a critical vulnerability affecting various Microsoft Windows systems. By analyzing resources such as the NVD page, Security Advisory, Security Notice, and Security Update Guide, we've provided a comprehensive overview of this vulnerability. For more information about the vulnerability, including its description, severity, technical details, and known affected software configurations, visit the NVD page or the links below.

• Security Advisory - Remote Code Execution Vulnerability in Some Microsoft Windows Systems

• Security Notice - Statement on Microsoft Remote Code Execution Vulnerability(CVE-2019-0708)

• CVE-2019-0708 - Security Update Guide - Microsoft - Remote Desktop Services Remote Code Execution Vulnerability

• BlueKeep RDP Remote Windows Kernel Use-After-Free