Remote Desktop in Windows XP SP1 does not verify the "Force shutdown from a remote system" setting, which allows remote attackers to shut down the system by executing TSShutdn.exe.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.01
EPSS Ranking 75.1%