VULNERABILITY INTELLIGENCE
CVE-2005-0904
CVSS score2.1 LOW
EPSS probability7.05%
CISA KEVNot currently listed
Published2005-05-02
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:N/I:N/A:P
Description
Remote Desktop in Windows XP SP1 does not verify the "Force shutdown from a remote system" setting, which allows remote attackers to shut down the system by executing TSShutdn.exe.
Weakness classification
- CWE-20: Improper Input Validation