CVE-2019-0708 — exploited in the wild

Exploitation observed by OffSeq honeypot sensors · last 30 days · last seen 19 days ago · first observed 2026-10-04 (19 days ago)

Listed in CISA's Known Exploited Vulnerabilities catalog; the most recent exploitation attempt against OffSeq honeypots was 19 days ago.

About CVE-2019-0708

A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop Services Remote Code Execution Vulnerability'.

CWE-416

OffSeq's global honeypot fleet recorded 2,655 exploitation attempts against CVE-2019-0708 from 65 distinct source IPs in the last 30 days — direct in-the-wild telemetry: every hit is a real attacker probing a decoy, not a scan of a vulnerability database.

References