CVE-2019-0708criticalbajo ataqueransomwareCWE-416

CVE-2019-0708: fallo crítico en Microsoft Windows

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Windows Server+ Monitorear Windows

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

100Vexday Risk Score

Corrige ahora. Ella está bajo explotación confirmada por CISA y tiene exploit funcional público.

ssvc Actcvss 9.8epss 100%
de la publicación al armael mismo día
Publicada en NVD16 may
1ª PoC14 may
metasploit14 may
CISA KEV+902d
Acción exigida por CISAplazo federal: 2022-05-03

Apply updates per vendor instructions.

En resumen

Una vulnerabilidad crítica en el Servicio de Escritorio Remoto de Windows permite a atacantes ejecutar código malicioso en una computadora de forma remota sin necesidad de contraseña o credenciales. Esto es peligroso porque los atacantes pueden obtener control total del sistema afectado a través de internet.

Detalle técnico

Una vulnerabilidad de use-after-free (CWE-416) en el manejo del protocolo RDP permite ejecución remota de código sin autenticación cuando se envían paquetes especialmente manipulados al servicio RDP. El ataque requiere acceso de red al puerto 3389 pero no demanda autenticación previa, permitiendo explotación masiva de sistemas Windows vulnerables.

Resumen generado y traducido por IA a partir de la descripción oficial.

El análisis completo de esta CVE está disponible en portugués →

A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop Services Remote Code Execution Vulnerability'.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Productos afectados
Microsoft · WindowsMicrosoft · Windows Server
PoCs públicas encontradas — 188✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/47416exploitdbwww.exploit-db.com/exploits/47683no verificadoexploitdbwww.exploit-db.com/exploits/46946no verificadoexploitdbwww.exploit-db.com/exploits/47120no verificadogithubgithub.com/Ekultek/BlueKeep★ 1186githubgithub.com/robertdavidgraham/rdpscan★ 922githubgithub.com/n1xbyte/CVE-2019-0708★ 495githubgithub.com/k8gege/CVE-2019-0708★ 388githubgithub.com/algo7/bluekeep_CVE-2019-0708_poc_to_exploit★ 342githubgithub.com/cbwang505/CVE-2019-0708-EXP-Windows★ 317githubgithub.com/0xeb-bp/bluekeep★ 294githubgithub.com/Cyb0r9/ispy★ 245githubgithub.com/RICSecLab/CVE-2019-0708★ 150githubgithub.com/Leoid/CVE-2019-0708★ 126githubgithub.com/dorkerdevil/Remote-Desktop-Services-Remote-Code-Execution-Vulnerability-CVE-2019-0708-★ 123githubgithub.com/p0p0p0/CVE-2019-0708-exploit★ 120githubgithub.com/worawit/CVE-2019-0708★ 109githubgithub.com/biggerwing/CVE-2019-0708-poc★ 82githubgithub.com/coolboy4me/cve-2019-0708_bluekeep_rce★ 75githubgithub.com/hook-s3c/CVE-2019-0708-poc★ 47githubgithub.com/umarfarook882/CVE-2019-0708★ 40githubgithub.com/syriusbughunt/CVE-2019-0708★ 38githubgithub.com/rockmelodies/CVE-2019-0708-Exploit★ 31githubgithub.com/Jaky5155/cve-2019-0708-exp★ 30githubgithub.com/HynekPetrak/detect_bluekeep.py★ 28githubgithub.com/mekhalleh/cve-2019-0708★ 23githubgithub.com/blacksunwen/CVE-2019-0708★ 19githubgithub.com/jiansiting/CVE-2019-0708★ 19githubgithub.com/cve-2019-0708-poc/cve-2019-0708★ 18githubgithub.com/fourtwizzy/CVE-2019-0708-Check-Device-Patch-Status★ 18githubgithub.com/gobysec/CVE-2019-0708★ 17githubgithub.com/cvencoder/cve-2019-0708★ 14githubgithub.com/RickGeex/msf-module-CVE-2019-0708★ 13githubgithub.com/closethe/CVE-2019-0708-POC★ 13githubgithub.com/SherlockSec/CVE-2019-0708★ 13githubgithub.com/Pa55w0rd/CVE-2019-0708★ 13githubgithub.com/wqsemc/CVE-2019-0708★ 12githubgithub.com/skyshell20082008/CVE-2019-0708-PoC-Hitting-Path★ 12githubgithub.com/ze0r/CVE-2019-0708-exp★ 12githubgithub.com/n0auth/CVE-2019-0708★ 11githubgithub.com/qing-root/CVE-2019-0708-EXP-MSF-★ 11githubgithub.com/anquanscan/CVE-2019-0708★ 9githubgithub.com/SugiB3o/Check-vuln-CVE-2019-0708★ 7githubgithub.com/thugcrowd/CVE-2019-0708★ 7githubgithub.com/NullByteSuiteDevs/CVE-2019-0708★ 6githubgithub.com/infiniti-team/CVE-2019-0708★ 6githubgithub.com/major203/cve-2019-0708-scan★ 6githubgithub.com/blockchainguard/CVE-2019-0708★ 5githubgithub.com/eastmountyxz/CVE-2019-0708-Windows★ 5githubgithub.com/Ravaan21/Bluekeep-Hunter★ 4githubgithub.com/turingcompl33t/bluekeep★ 4githubgithub.com/pry0cc/BlueKeepTracker★ 4githubgithub.com/ht0Ruial/CVE-2019-0708Poc-BatchScanning★ 4githubgithub.com/FrostsaberX/CVE-2019-0708★ 4githubgithub.com/victor0013/CVE-2019-0708★ 3githubgithub.com/andripwn/CVE-2019-0708★ 3githubgithub.com/pry0cc/cve-2019-0708-2★ 3githubgithub.com/areusecure/CVE-2019-0708★ 3githubgithub.com/smallFunction/CVE-2019-0708-POC★ 2githubgithub.com/ShadowBrokers-ExploitLeak/CVE-2019-0708★ 2githubgithub.com/ttsite/CVE-2019-0708-★ 2githubgithub.com/skommando/CVE-2019-0708★ 2githubgithub.com/infenet/CVE-2019-0708★ 2githubgithub.com/edvacco/CVE-2019-0708-POC★ 2githubgithub.com/haishanzheng/CVE-2019-0708-generate-hosts★ 2githubgithub.com/sbkcbig/CVE-2019-0708-Poc-exploit★ 1githubgithub.com/ttsite/CVE-2019-0708★ 1githubgithub.com/gildaaa/CVE-2019-0708★ 1githubgithub.com/UraSecTeam/CVE-2019-0708★ 1githubgithub.com/zjw88282740/CVE-2019-0708-win7★ 1githubgithub.com/hotdog777714/RDS_CVE-2019-0708★ 1githubgithub.com/freeide/CVE-2019-0708★ 1githubgithub.com/Gh0st0ne/rdpscan-BlueKeep★ 1githubgithub.com/CircuitSoul/CVE-2019-0708★ 1githubgithub.com/tranqtruong/Detect-BlueKeep★ 1githubgithub.com/adyanamul/Remote-Code-Execution-RCE-Exploit-BlueKeep-CVE-2019-0708-PoC★ 1githubgithub.com/safly/CVE-2019-0708★ 1githubgithub.com/303sec/CVE-2019-0708★ 1githubgithub.com/herhe/CVE-2019-0708poc★ 1githubgithub.com/temp-user-2014/CVE-2019-0708★ 1githubgithub.com/ntkernel0/CVE-2019-0708★ 1githubgithub.com/sbkcbig/CVE-2019-0708-EXPloit★ 1githubgithub.com/YSheldon/MS_T120★ 1githubgithub.com/Barry-McCockiner/CVE-2019-0708★ 1githubgithub.com/yushiro/CVE-2019-0708★ 1githubgithub.com/JSec1337/Scanner-CVE-2019-0708★ 1githubgithub.com/DeathStroke-source/Mass-scanner-for-CVE-2019-0708-RDP-RCE-Exploit★ 1githubgithub.com/distance-vector/CVE-2019-0708★ 1githubgithub.com/ulisesrc/-2-CVE-2019-0708★ 1githubgithub.com/nochemax/bLuEkEeP-GUI★ 1githubgithub.com/JasonLOU/CVE-2019-0708★ 1githubgithub.com/HackerJ0e/CVE-2019-0708★ 1githubgithub.com/AdministratorGithub/CVE-2019-0708★ 1githubgithub.com/cream-sec/CVE-2019-0708-Msf--★ 1githubgithub.com/wdfcc/CVE-2019-0708★ 1githubgithub.com/0x6b7966/CVE-2019-0708-RCE★ 1githubgithub.com/0xFlag/CVE-2019-0708-test★ 1githubgithub.com/1aa87148377/CVE-2019-0708★ 1githubgithub.com/SQLDebugger/CVE-2019-0708-Tool★ 0githubgithub.com/freeide/CVE-2019-0708-PoC-Exploit★ 0githubgithub.com/lisinan988/CVE-2019-0708-scan★ 0githubgithub.com/offensity/CVE-2019-0708★ 0githubgithub.com/davidfortytwo/bluekeep★ 0githubgithub.com/GopeshKachhadiya/Windows-2★ 0githubgithub.com/sbkcbig/CVE-2019-0708-EXPloit-3389★ 0githubgithub.com/oneoy/BlueKeep★ 0githubgithub.com/zoujialan/CVE-2019-0708-RCE★ 0githubgithub.com/benhe119/bluekeepscan★ 0githubgithub.com/gousseine-systems/vuln-rabilit-windows7★ 0githubgithub.com/yetiddbb/CVE-2019-0708-PoC★ 0githubgithub.com/AaronCaiii/CVE-2019-0708-POC★ 0githubgithub.com/ayomideadams61-hub/bluekeep-metsploitable-lab★ 0githubgithub.com/ryan-ally/rdp0708scanner★ 0githubgithub.com/emmadej1234/bluekeep-metasploit-lab-project★ 0githubgithub.com/CPT-Jack-A-Castle/Haruster-CVE-2019-0708-Exploit★ 0githubgithub.com/Ayomide-29/bluekeep_metasploit_practice★ 0githubgithub.com/Mohaimenul370/Perform-an-RDP-exploitation-using-the-BlueKeep-vulnerability-CVE-2019-0708-on-Windows★ 0githubgithub.com/Micr067/CVE-2019-0708RDP-MSF★ 0githubgithub.com/Nweks/Bluekeep-Metasploit-Lab-Project★ 0githubgithub.com/Ameg-yag/Wincrash★ 0githubgithub.com/pywc/CVE-2019-0708★ 0githubgithub.com/SebasPV27/Explotacion-RCE-Pentesting-BlueKeep-CVE-2019-0708-★ 0githubgithub.com/sezayi1972/CVE-2019-0708★ 0githubgithub.com/isabelacostaz/CVE-2019-0708-POC★ 0githubgithub.com/bibo318/kali-CVE-2019-0708-lab★ 0githubgithub.com/rasan2001/Microsoft-Remote-Desktop-Services-Remote-Code-Execution-Vulnerability-CVE-2019-0708★ 0githubgithub.com/denuwanjayasekara/CVE-Exploitation-Reports★ 0githubgithub.com/hualy13/CVE-2019-0708-Check★ 0githubgithub.com/ZhaoYukai/CVE-2019-0708★ 0githubgithub.com/xiyangzuishuai/Dark-Network-CVE-2019-0708★ 0githubgithub.com/f8al/CVE-2019-0708-POC★ 0githubgithub.com/ZhaoYukai/CVE-2019-0708-Batch-Blue-Screen★ 0vulncheckvulncheck.com/xdb/3003205270edno verificadovulncheckvulncheck.com/xdb/a34013074716no verificadovulncheckvulncheck.com/xdb/d7b3d9b80819no verificadovulncheckvulncheck.com/xdb/212d4dc490b0no verificadocve_referencepacketstormsecurity.com/files/162960/Microsoft-RDP-Remote-Code-Execution.htmlno verificadovulncheckvulncheck.com/xdb/ab5a3e05eeebno verificadovulncheckvulncheck.com/xdb/87091cafec0ano verificadovulncheckvulncheck.com/xdb/7536b79e5849no verificadovulncheckvulncheck.com/xdb/d18cbf862a1bno verificadovulncheckvulncheck.com/xdb/92597113b854no verificadovulncheckvulncheck.com/xdb/c9d000a1a180no verificadovulncheckvulncheck.com/xdb/9565e85eb46cno verificadovulncheckvulncheck.com/xdb/11d36b021267no verificadovulncheckvulncheck.com/xdb/2426c24787e9no verificadovulncheckvulncheck.com/xdb/9a50cc3bc409no verificadovulncheckvulncheck.com/xdb/92468824377eno verificadovulncheckvulncheck.com/xdb/17163e8dffc6no verificadovulncheckvulncheck.com/xdb/2116a08dcafdno verificadovulncheckvulncheck.com/xdb/1959a82c2e55no verificadovulncheckvulncheck.com/xdb/681cd783600bno verificadovulncheckvulncheck.com/xdb/50a6a80c166fno verificadovulncheckvulncheck.com/xdb/54ea167ea153no verificadovulncheckvulncheck.com/xdb/6e073a810b04no verificadovulncheckvulncheck.com/xdb/fd998d08aeccno verificadovulncheckvulncheck.com/xdb/d0813d668813no verificadovulncheckvulncheck.com/xdb/f783965878bano verificadovulncheckvulncheck.com/xdb/48acdd34a61bno verificadovulncheckvulncheck.com/xdb/3a02e0152437no verificadovulncheckvulncheck.com/xdb/b78833c5a34cno verificadovulncheckvulncheck.com/xdb/0a6b5b0cbd12no verificadovulncheckvulncheck.com/xdb/4447344e0e57no verificadovulncheckvulncheck.com/xdb/5c1169f4925cno verificadovulncheckvulncheck.com/xdb/9b644acc642dno verificadovulncheckvulncheck.com/xdb/9523c9b3ece9no verificadovulncheckvulncheck.com/xdb/83dd1b8c1868no verificadovulncheckvulncheck.com/xdb/3785316d7fc5no verificadovulncheckvulncheck.com/xdb/495f5c9a61a0no verificadocve_referencepacketstormsecurity.com/files/153133/Microsoft-Windows-Remote-Desktop-BlueKeep-Denial-Of-Service.htmlno verificadocve_referencepacketstormsecurity.com/files/154579/BlueKeep-RDP-Remote-Windows-Kernel-Use-After-Free.htmlno verificadocve_referencepacketstormsecurity.com/files/155389/Microsoft-Windows-7-x86-BlueKeep-RDP-Use-After-Free.htmlno verificadovulncheckvulncheck.com/xdb/9d68385aa1c1no verificadovulncheckvulncheck.com/xdb/d607d811c122no verificadovulncheckvulncheck.com/xdb/fee7134123f4no verificadovulncheckvulncheck.com/xdb/0543fd1784c2no verificadovulncheckvulncheck.com/xdb/c67a96a54a2fno verificadovulncheckvulncheck.com/xdb/b0cd57c5988dno verificadovulncheckvulncheck.com/xdb/8b5d56b910c5no verificadovulncheckvulncheck.com/xdb/b63c341a0817no verificadocve_referencepacketstormsecurity.com/files/153627/Microsoft-Windows-RDP-BlueKeep-Denial-Of-Service.htmlno verificadovulncheckvulncheck.com/xdb/1bd6e3d7edf2no verificadovulncheckvulncheck.com/xdb/181fc435a9f1no verificadovulncheckvulncheck.com/xdb/387c8e6971feno verificadovulncheckvulncheck.com/xdb/bf63479c559bno verificadovulncheckvulncheck.com/xdb/bb428db8e94dno verificadovulncheckvulncheck.com/xdb/f0d631a0e09bno verificadovulncheckvulncheck.com/xdb/e72fa18ddcc7no verificado
⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
CVEs relacionadas — Microsoft Windows

En el mismo producto, de las más peligrosas a las menos.

CVE-2020-1350CRITICALCVE-2020-1350EPSS 96.7%KEVCVE-2020-0601HIGHCVE-2020-0601EPSS 89.1%KEVCVE-2019-1458HIGHCVE-2019-1458EPSS 74.4%KEVCVE-2020-0938HIGHCVE-2020-0938EPSS 69.0%KEVCVE-2020-1020HIGHCVE-2020-1020EPSS 65.0%KEVCVE-2019-0808HIGHCVE-2019-0808EPSS 53.0%KEV