CVE-2018-0708

HIGH

QNAP Q'center < 1.7.1063 - Authenticated OS Command Injection

Title source: llm

Exploitation Summary

EIP tracks 3 public exploits for CVE-2018-0708. PoCs published by Core Security, ntkernel0, ntkernel.

AI-analyzed exploit summary The exploit demonstrates multiple vulnerabilities in QNAP Qcenter Virtual Appliance, including privilege escalation via API endpoint exposure of admin credentials and command injection in password change and network configuration functionalities.

Description

Command injection vulnerability in networking of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run arbitrary commands.

Exploits (3)

exploitdb WORKING POC VERIFIED

by Core Security · textwebappshardware

https://www.exploit-db.com/exploits/45015

View Code ZIP pw:eip

The exploit demonstrates multiple vulnerabilities in QNAP Qcenter Virtual Appliance, including privilege escalation via API endpoint exposure of admin credentials and command injection in password change and network configuration functionalities.

Classification

Working Poc 100%

Attack Type

Rce | Lpe | Info Leak

Complexity

Moderate

Reliability

Reliable

Target: QNAP Qcenter Virtual Appliance Version 1.6.1056 (20170825), 1.6.1075 (20171123)

Auth required

Prerequisites: Authenticated access to the Qcenter web console · Base64 encoding for password fields

MITRE ATT&CK

T1068 - Exploitation for Privilege Escalation T1190 - Exploit Public-Facing Application T1059 - Command and Scripting Interpreter

devstral-2 · analyzed Feb 16, 2026 Full analysis →

nomisec WORKING POC 1 stars

by ntkernel0 · poc

https://github.com/ntkernel0/CVE-2019-0708

View Code ZIP pw:eip

This repository contains multiple proof-of-concept exploits for CVE-2019-0708 (BlueKeep), a critical RCE vulnerability in Microsoft Remote Desktop Services. The exploits include DoS and RCE capabilities, targeting unpatched Windows systems via crafted RDP packets.

Classification

Working Poc 90%

Attack Type

Rce

Complexity

Complex

Reliability

Reliable

Target: Microsoft Windows Remote Desktop Services (RDP)

No auth needed

Prerequisites: Network access to target RDP service · Unpatched Windows system (pre-May 2019 updates)

MITRE ATT&CK

T1189 - Drive-by Compromise T1068 - Exploitation for Privilege Escalation

devstral-2 · analyzed Feb 16, 2026 Full analysis →

gitlab WORKING POC

by ntkernel · poc

https://gitlab.com/ntkernel/CVE-2019-0708

View Code ZIP pw:eip

This repository contains functional exploit code for CVE-2019-0708 (BlueKeep), a critical RCE vulnerability in Microsoft Remote Desktop Services. The PoC includes RDP protocol handling, encryption/decryption logic, and packet crafting to trigger the vulnerability.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Complex

Reliability

Reliable

Target: Microsoft Remote Desktop Services (RDP)

No auth needed

Prerequisites: Network access to target RDP service · Python environment with required dependencies

MITRE ATT&CK