Test ID:	1.3.6.1.4.1.25623.1.0.108794
Category:	Huawei
Title:	Huawei Data Communication: RCE Vulnerability in Some Microsoft Windows Systems (huawei-sa-20190529-01-windows)
Summary:	Microsoft released a security advisory to disclose a remote code; execution (RCE) vulnerability in Remote Desktop Services.;; This VT has been deprecated and is therefore no longer functional.
Description:	Summary: Microsoft released a security advisory to disclose a remote code execution (RCE) vulnerability in Remote Desktop Services. This VT has been deprecated and is therefore no longer functional. Vulnerability Insight: Microsoft released a security advisory to disclose a remote code execution vulnerability in Remote Desktop Services. An unauthenticated attacker connects to the target system using RDP and sends specially crafted requests to exploit the vulnerability. Successful exploit may cause arbitrary code execution on the target system. (Vulnerability ID: HWPSIRT-2019-05133)This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2019-0708.Huawei has released software updates to fix this vulnerability. This advisory is available in the linked references. Vulnerability Impact: An attacker who successfully exploited this vulnerability could execute arbitrary code on the target system. Affected Software/OS: OceanStor HVS85T versions V100R001C00 OceanStor HVS88T versions V100R001C00 SMC2.0 versions V500R002C00 V600R006C00 Solution: See the referenced vendor advisory for a solution. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2019-0708 http://packetstormsecurity.com/files/153133/Microsoft-Windows-Remote-Desktop-BlueKeep-Denial-Of-Service.html http://packetstormsecurity.com/files/153627/Microsoft-Windows-RDP-BlueKeep-Denial-Of-Service.html http://packetstormsecurity.com/files/154579/BlueKeep-RDP-Remote-Windows-Kernel-Use-After-Free.html http://packetstormsecurity.com/files/155389/Microsoft-Windows-7-x86-BlueKeep-RDP-Use-After-Free.html http://packetstormsecurity.com/files/162960/Microsoft-RDP-Remote-Code-Execution.html https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0708
Copyright	Copyright (C) 2020 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.