Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA11697
HistoryAug 13, 2019 - 12:00 a.m.

KLA11697 RCE vulnerabilities in Microsoft Apps

2019-08-1300:00:00
Kaspersky Lab
threats.kaspersky.com
28

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.131 Low

EPSS

Percentile

95.4%

JSON

Detect date:

08/13/2019

Severity:

Critical

Description:

Remote code execution vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerability to execute arbitrary code.

Exploitation:

Public exploits exist for this vulnerability.

Affected products:

Microsoft Remote Desktop for IoS
Microsoft Remote Desktop for Android
Microsoft Remote Desktop for Mac

Solution:

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories:

CVE-2019-1182
CVE-2019-1181

Impacts:

ACE

Related products:

Microsoft Remote Desktop

Microsoft official advisories:

Related

krebs 1
cisa 1
msrc 3
attackerkb 2
myhack58 1
talosblog 2
prion 4
cve 4
thn 1
openvas 10
huawei 1
symantec 2
mscve 2
checkpoint_advisories 1
mssecure 1
qualysblog 2
threatpost 1
securelist 1
mskb 11
nessus 10
kaspersky 2
krebs
krebs
Patch Tuesday, August 2019 Edition
2019-08-13 21:57:13
cisa
cisa
Microsoft Releases Security Updates to Address Remote Code Execution Vulnerabilities
2019-08-14 00:00:00
msrc
msrc
Patch new wormable vulnerabilities in Remote Desktop Services (CVE-2019-1181/1182)
2019-08-13 07:00:00
Patch new wormable vulnerabilities in Remote Desktop Services (CVE-2019-1181/1182)
2019-08-13 17:07:13
Patch new wormable vulnerabilities in Remote Desktop Services (CVE-2019-1181/1182)
2019-08-13 07:00:00
attackerkb
attackerkb
DejaBlue, RDP Heap Overflow
2019-08-14 00:00:00
Insecure RDP
2020-10-09 00:00:00
myhack58
myhack58
Windows Remote Desktop Services remote command execution vulnerability, CVE-2019-1181/1182-a vulnerability warning-the black bar safety net
2019-08-14 00:00:00
talosblog
talosblog
The latest on BlueKeep and DejaBlue vulnerabilities — Using Firepower to defend against encrypted DejaBlue
2019-11-04 07:43:36
Microsoft Patch Tuesday — Aug. 2019: Vulnerability disclosures and Snort coverage
2019-08-14 09:55:35
prion
prion
Remote code execution
2019-08-14 21:15:00
Remote code execution
2019-08-14 21:15:00
Remote code execution
2019-08-14 21:15:00
cve
cve
CVE-2019-1182
2019-08-14 21:15:00
CVE-2019-1181
2019-08-14 21:15:00
CVE-2019-1226
2019-08-14 21:15:00
thn
thn
4 New BlueKeep-like 'Wormable' Windows Remote Desktop Flaws Discovered
2019-08-13 18:22:00
openvas
openvas
Huawei Data Communication: Four Remote Code Execution Vulnerability in Some Microsoft Windows Systems (huawei-sa-20190819-01-windows)
2020-06-05 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4512506)
2019-08-14 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4512488)
2019-08-14 00:00:00
huawei
huawei
Security Advisory - Four Remote Code Execution Vulnerabilities in Some Microsoft Windows Systems
2019-08-19 00:00:00
symantec
symantec
Microsoft Windows Remote Desktop Services CVE-2019-1181 Remote Code Execution Vulnerability
2019-08-13 00:00:00
Microsoft Windows Remote Desktop Services CVE-2019-1182 Remote Code Execution Vulnerability
2019-08-13 00:00:00
mscve
mscve
Remote Desktop Services Remote Code Execution Vulnerability
2019-08-13 07:00:00
Remote Desktop Services Remote Code Execution Vulnerability
2019-08-13 07:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Remote Desktop Services Remote Code Execution (CVE-2019-1182)
2019-11-25 00:00:00
mssecure
mssecure
Mitigating vulnerabilities in endpoint network stacks
2020-05-04 16:00:25
qualysblog
qualysblog
Windows Remote Desktop Vulnerabilities (Seven Monkeys) – How to Detect and Patch
2019-08-13 23:58:15
August 2019 Patch Tuesday – 93 Vulns, 29 Critical, 7 Remote Desktop Vulns, Hyper-V, DHCP, Adobe vulns
2019-08-13 18:49:51
threatpost
threatpost
Shades of BlueKeep: Wormable Remote Desktop Bugs Top August Patch Tuesday List
2019-08-13 20:29:10
securelist
securelist
IT threat evolution Q3 2019. Statistics
2019-11-29 10:00:19
mskb
mskb
August 13, 2019—KB4512482 (Security-only update)
2019-08-13 07:00:00
August 13, 2019—KB4512489 (Security-only update)
2019-08-13 07:00:00
August 13, 2019—KB4512488 (Monthly Rollup)
2019-08-13 07:00:00
nessus
nessus
KB4512482: Windows Server 2012 August 2019 Security Update
2019-08-13 00:00:00
KB4512486: Windows 7 and Windows Server 2008 R2 August 2019 Security Update
2019-08-13 00:00:00
KB4512489: Windows 8.1 and Windows Server 2012 R2 August 2019 Security Update
2019-08-13 00:00:00
kaspersky
kaspersky
KLA11989 Multiple vulnerabilities in Microsoft Products (ESU)
2019-08-13 00:00:00
KLA11534 Multiple vulnerabilities in Microsoft Windows
2019-08-13 00:00:00

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.131 Low

EPSS

Percentile

95.4%

JSON
Related for KLA11697
krebs1cisa1msrc3attackerkb2myhack581talosblog2prion4cve4thn1openvas10huawei1symantec2mscve2checkpoint_advisories1mssecure1qualysblog2threatpost1securelist1mskb11nessus10kaspersky2