Vulnerability Database

309,961

Total vulnerabilities in the database

CVE-2014-0296

The Remote Desktop Protocol (RDP) implementation in Microsoft Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 does not properly encrypt sessions, which makes it easier for man-in-the-middle attackers to obtain sensitive information by sniffing the network or modify session content by sending crafted RDP packets, aka "RDP MAC Vulnerability."

  • Published: Jun 11, 2014
  • Updated: Nov 9, 2025
  • CVE: CVE-2014-0296
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 5.1
  • AV:N/AC:H/Au:N/C:P/I:P/A:P

CWEs:

Software From Fixed in
microsoft / windows_server_2012 r2 r2.x
microsoft / windows_7 --sp1 --sp1.x