1907 matches found
CVE-2022-24883
CVE-2022-24883 affects FreeRDP when used as an RDP server authentication backend against a SAM database/file. Prior to version 2.7.0, authentication against an invalid SAM path could succeed for invalid credentials, meaning that RDP server implementations using FreeRDP to authenticate against a S...
CVE-2022-24882
FreeRDP before version 2.7.0 is vulnerable where NTLM authentication does not abort on an empty password, affecting FreeRDP-based RDP servers (clients are not affected). The issue is fixed in FreeRDP 2.7.0. Open questions: no explicit exploitation details in the provided documents; no additional ...
CVE-2022-24882 Server side NTLM does not properly check parameters in FreeRDP
FreeRDP is a free implementation of the Remote Desktop Protocol RDP. In versions prior to 2.7.0, NT LAN Manager NTLM authentication does not properly abort when someone provides and empty password value. This issue affects FreeRDP based RDP Server implementations. RDP clients are not affected. Th...
CVE-2022-24882 Server side NTLM does not properly check parameters in FreeRDP
FreeRDP is a free implementation of the Remote Desktop Protocol RDP. In versions prior to 2.7.0, NT LAN Manager NTLM authentication does not properly abort when someone provides and empty password value. This issue affects FreeRDP based RDP Server implementations. RDP clients are not affected. Th...
CVE-2022-24882
FreeRDP is a free implementation of the Remote Desktop Protocol RDP. In versions prior to 2.7.0, NT LAN Manager NTLM authentication does not properly abort when someone provides and empty password value. This issue affects FreeRDP based RDP Server implementations. RDP clients are not affected. Th...
CVE-2022-24533
Remote Desktop Protocol Remote Code Execution Vulnerability...
CVE-2022-24533
Remote Desktop Protocol Remote Code Execution Vulnerability...
CVE-2022-24533
Remote Desktop Protocol Remote Code Execution Vulnerability...
Remote code execution
Remote Desktop Protocol Remote Code Execution Vulnerability...
CVE-2022-24533 Remote Desktop Protocol Remote Code Execution Vulnerability
...
CVE-2022-24533
Technical details about CVE-2022-24533 (affected products, components, root cause, versions, fixes) are not provided in the connected documents. The available materials only reiterate a Remote Desktop Protocol RCE without specifics. Monitor for updates.
Microsoft Windows Remote Desktop Protocol Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft Windows Remote Desktop Protocol RDP, an application used by Microsoft to connect to remote Windows desktops. The vulnerability stems from the failure of a networked system or product to properly filter special elements of code segments...
KLA12502 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in...
PT-2022-2870 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to the Remote Desktop Protocol implementation in Microsoft Windows, specifically concerning incorrect code generation management. This can be exploited by a...
Microsoft Windows Remote Desktop Protocol 代码注入漏洞
A remote code execution vulnerability exists in Microsoft Windows Remote Desktop Protocol RDP, an application used by Microsoft to connect to remote Windows desktops. The vulnerability stems from the failure of a networked system or product to properly filter special elements of code segments...
Into the Breach: Breaking Down 3 SaaS App Cyber Attacks in 2022
During the last week of March, three major tech companies - Microsoft, Okta, and HubSpot - reported significant data breaches. DEV-0537, also known as LAPSUS$, performed the first two. This highly sophisticated group utilizes state-of-the-art attack vectors to great success. Meanwhile, the group...
The vulnerability of the Remote Desktop Protocol Client protocol on the Microsoft Windows operating system, which allows a hacker to disclose protected information
The vulnerability of the Remote Desktop Protocol Client on the Microsoft Windows operating system is related to the disclosure of information in the erroneous data field. Exploiting this vulnerability allows a malicious actor to disclose the protected information from a remote location...
The vulnerability of the Remote Desktop Protocol implementation in the Microsoft Windows operating system allows a hacker to execute arbitrary code.
The vulnerability of the Remote Desktop Protocol implementation in the Microsoft Windows operating system is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
FBI, CISA Warn of Russian Hackers Exploiting MFA and PrintNightmare Bug
The U.S. Cybersecurity and Infrastructure Security Agency CISA and the Federal Bureau of Investigation FBI have released a joint advisory warning that Russia-backed threat actors hacked the network of an unnamed non-governmental entity by exploiting a combination of flaws. "As early as May 2021,...