CVE-2019-1225

Remote Desktop Protocol Server Information Disclosure Vulnerability

High · published August 14, 2019

CVSS v3.1
7.5
EPSS
11%
Percentile
95.8
In the wild
Unconfirmed
What it is

An information disclosure vulnerability exists when the Windows RDP server improperly discloses the contents of its memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the system.

To exploit this vulnerability, an attacker would have to connect remotely to an affected system and run a specially crafted application.

The security update addresses the vulnerability by correcting how the Windows RDP server initializes memory.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.10522 · 95.8th percentile
Published
2019-08-14T20:55Z
EPSS history
Timeline
  • 14 AUG 20:55Z
    Remote Desktop Protocol Server Information Disclosure Vulnerability
    cvelistv5