rustdesk kayıtları

rustdesk üreticisine ait 12 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 0
Düzeltme kaydı olan: %0
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

12 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
39İzleyin	CVE-2024-25140İstismar yok	A default installation of RustDesk 1.2.3 on Windows places a WDKTestCert certificate under Trusted Root Certification Authorities with Enhanrustdesk · rustdesk · CWE-295 Kimlik doğrulamasız Zayıf kripto	Kritik9,8	—	%0,5	6 Şub 2024
37İzleyin	CVE-2026-30797İstismar yok	RustDesk rustdesk://config/ URI Silently Re-homes Client to Attacker-Controlled Serverrustdesk · rustdesk · CWE-749 Kimlik doğrulamasız	Kritik9,3	—	%0,6	5 Mar 2026
37İzleyin	CVE-2026-30793İstismar yok	RustDesk Flutter URI Handler Sets Permanent Password Without Privilege Check or User Confirmationrustdesk · rustdesk · CWE-285 Kimlik doğrulamasız Erişim denetimi (IDOR) CSRF	Kritik9,3	—	%0,3	5 Mar 2026
34İzleyin	CVE-2026-30791İstismar yok	RustDesk Client Accepts Pseudo-Encrypted Config Strings Without Cryptographic Validationrustdesk · rustdesk · CWE-327 Kimlik doğrulamasız Zayıf kripto	Yüksek8,7	—	%0,3	5 Mar 2026
34İzleyin	CVE-2026-3598İstismar yok	RustDesk Server Generates Config Strings Using Reversible Encoding (Base64 + Reverse) Instead of Encryptionrustdesk · rustdesk server · CWE-327 Kimlik doğrulamasız Zayıf kripto	Yüksek8,7	—	%0,3	5 Mar 2026
34İzleyin	CVE-2026-30795İstismar yok	RustDesk HTTP Client Silently Accepts Invalid TLS Certificates After Handshake Failurerustdesk · rustdesk · CWE-319 Kimlik doğrulamasız Zayıf kripto	Yüksek8,7	—	%0,3	5 Mar 2026
33İzleyin	CVE-2026-30792İstismar yok	RustDesk Client Blindly Merges Unauthenticated Strategy Payloads, Bypassing Local Security Settingsrustdesk · rustdesk · CWE-345 Kimlik doğrulamasız	Yüksek8,3	—	%0,3	5 Mar 2026
32İzleyin	CVE-2026-30798İstismar yok	RustDesk Client Accepts Unauthenticated stop-service Command via Strategy Payloadrustdesk · rustdesk · CWE-345 Kimlik doğrulamasız	Yüksek8,2	—	%0,3	5 Mar 2026
32İzleyin	CVE-2026-30785İstismar yok	RustDesk Encrypts Local Passwords with World-Readable Machine ID and Fixed Zero Nonce (XSalsa20-Poly1305)rustdesk · rustdesk · CWE-257 Prototype pollution	Yüksek8,2	—	%0,1	5 Mar 2026
27İzleyin	CVE-2026-30796İstismar yok	RustDesk Client Transmits Preset Address Book Password Verbatim in Heartbeat Syncrustdesk · rustdesk server · CWE-522 Kimlik doğrulamasız Bilgi sızıntısı	Orta6,9	—	%0,5	5 Mar 2026
22İzleyin	CVE-2026-30789İstismar yok	RustDesk Auth Proof Uses Server-Controlled Salt/Challenge and Fast Double-SHA256, Enabling Offline Brute-Forcerustdesk · rustdesk · CWE-916	Orta5,7	—	%0,3	5 Mar 2026
19İzleyin	CVE-2026-30783İstismar yok	RustDesk Client Can Orphan API Channel to Ignore All Admin Commands and ACL Policiesrustdesk · rustdesk · CWE-602 Yerel yetki yükseltme	Orta4,8	—	%0,5	5 Mar 2026

CVE-2024-25140
39İzleyin
A default installation of RustDesk 1.2.3 on Windows places a WDKTestCert certificate under Trusted Root Certification Authorities with Enhan
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- Zayıf kripto
rustdesk · rustdesk6 Şub 2024
CVE-2026-30797
37İzleyin
RustDesk rustdesk://config/ URI Silently Re-homes Client to Attacker-Controlled Server
KritikCVSS 9,3İstismar yokEPSS %1
- Kimlik doğrulamasız
rustdesk · rustdesk5 Mar 2026
CVE-2026-30793
37İzleyin
RustDesk Flutter URI Handler Sets Permanent Password Without Privilege Check or User Confirmation
KritikCVSS 9,3İstismar yokEPSS %0
rustdesk · rustdesk5 Mar 2026
CVE-2026-30791
34İzleyin
RustDesk Client Accepts Pseudo-Encrypted Config Strings Without Cryptographic Validation
YüksekCVSS 8,7İstismar yokEPSS %0
- Kimlik doğrulamasız
- Zayıf kripto
rustdesk · rustdesk5 Mar 2026
CVE-2026-3598
34İzleyin
RustDesk Server Generates Config Strings Using Reversible Encoding (Base64 + Reverse) Instead of Encryption
YüksekCVSS 8,7İstismar yokEPSS %0
- Kimlik doğrulamasız
- Zayıf kripto
rustdesk · rustdesk server5 Mar 2026
CVE-2026-30795
34İzleyin
RustDesk HTTP Client Silently Accepts Invalid TLS Certificates After Handshake Failure
YüksekCVSS 8,7İstismar yokEPSS %0
- Kimlik doğrulamasız
- Zayıf kripto
rustdesk · rustdesk5 Mar 2026
CVE-2026-30792
33İzleyin
RustDesk Client Blindly Merges Unauthenticated Strategy Payloads, Bypassing Local Security Settings
YüksekCVSS 8,3İstismar yokEPSS %0
- Kimlik doğrulamasız
rustdesk · rustdesk5 Mar 2026
CVE-2026-30798
32İzleyin
RustDesk Client Accepts Unauthenticated stop-service Command via Strategy Payload
YüksekCVSS 8,2İstismar yokEPSS %0
- Kimlik doğrulamasız
rustdesk · rustdesk5 Mar 2026
CVE-2026-30785
32İzleyin
RustDesk Encrypts Local Passwords with World-Readable Machine ID and Fixed Zero Nonce (XSalsa20-Poly1305)
YüksekCVSS 8,2İstismar yokEPSS %0
- Prototype pollution
rustdesk · rustdesk5 Mar 2026
CVE-2026-30796
27İzleyin
RustDesk Client Transmits Preset Address Book Password Verbatim in Heartbeat Sync
OrtaCVSS 6,9İstismar yokEPSS %0
- Kimlik doğrulamasız
- Bilgi sızıntısı
rustdesk · rustdesk server5 Mar 2026
CVE-2026-30789
22İzleyin
RustDesk Auth Proof Uses Server-Controlled Salt/Challenge and Fast Double-SHA256, Enabling Offline Brute-Force
OrtaCVSS 5,7İstismar yokEPSS %0
rustdesk · rustdesk5 Mar 2026
CVE-2026-30783
19İzleyin
RustDesk Client Can Orphan API Channel to Ignore All Admin Commands and ACL Policies
OrtaCVSS 4,8İstismar yokEPSS %0
- Yerel yetki yükseltme
rustdesk · rustdesk5 Mar 2026