Rapid7 Vulnerability & Exploit Database

Microsoft Windows: CVE-2017-8714: Remote Desktop Virtual Host Remote Code Execution Vulnerability

Free InsightVM Trial No Credit Card Necessary
2024 Attack Intel Report Latest research by Rapid7 Labs
Back to Search

Microsoft Windows: CVE-2017-8714: Remote Desktop Virtual Host Remote Code Execution Vulnerability

Severity
7
CVSS
(AV:L/AC:M/Au:N/C:C/I:C/A:C)
Published
09/12/2017
Created
07/25/2018
Added
09/12/2017
Modified
09/11/2024

Description

The Windows Hyper-V component on Microsoft Windows 8.1, Windows Server 2012 Gold and R2,, Windows 10 1607, and Windows Server 2016 allows a remote code execution vulnerability when it fails to properly validate input from an authenticated user on a guest operating system, aka "Remote Desktop Virtual Host Remote Code Execution Vulnerability".

Solution(s)

  • microsoft-windows-windows_10-1607-kb4038782
  • microsoft-windows-windows_server_2012-kb4038786
  • microsoft-windows-windows_server_2012_r2-kb4038793
  • microsoft-windows-windows_server_2016-1607-kb4038782
  • msft-kb4038786-2ac4d3a4-287f-4f33-bb61-b7b81245f55b
  • msft-kb4038786-793b7e3e-090e-472e-b275-b520b5832a77
  • msft-kb4038793-8c3d7238-564c-4ed3-ae6f-e3d9881f6f5f
  • msft-kb4038793-d97e9753-f904-44d9-87a2-35cbf248aef4

References

insightVM

Advanced vulnerability management analytics and reporting.
Key Features
Free InsightVM Trial View All Features

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;