CVE:CVE-2019-1405
CNNVD:CNNVD-201911-594
Microsoft Windows UPnP是美国微软（Microsoft）公司的一个设备代理。提供一个代理允许Windows网络连接识别ZoneDirector的IP地址。
Microsoft Windows UPnP Service中存在安全漏洞。攻击者可通过登录到受影响的系统并运行特制的脚本或应用程序利用该漏洞以提升的系统权限运行任意代码。以下产品及版本受到影响：Microsoft Windows 10，Windows 10版本1607，Windows 10版本1709，Windows 10版本1803，Windows 10版本1809，Windows 10版本1903，Windows 7 SP1，Windows 8.1，Windows RT 8.1，Windows Server 2008 SP2，Windows Server 2008 R2 SP1，Windows Server 2012，Windows Server 2012 R2，Windows Server 2016，Windows Server 2019，Windows Server版本1803，Windows Server版本1903。
solution:Upgrade microsoft windows_10 to a higher version than -,1607,1709,1803,1809,1903,and avoid the version 1607,1709,1803,1809,1903; Upgrade microsoft windows_7 to a higher version than -:sp1,and avoid the version -:sp1; Upgrade microsoft windows_8.1 to a higher version than -; Upgrade microsoft windows_rt_8.1 to a higher version than -; Upgrade microsoft windows_server_2008 to a higher version than -:sp2,r2:sp1,and avoid the version -:sp2,r2:sp1; Upgrade microsoft windows_server_2012 to a higher version than -,r2,and avoid the version r2; Upgrade microsoft windows_server_2016 to a higher version than -,1803,1903,and avoid the version 1803,1903; Upgrade microsoft windows_server_2019 to a higher version than -