CVE-2022-24882

FreeRDP before version 2.7.0 is vulnerable where NTLM authentication does not abort on an empty password, affecting FreeRDP-based RDP servers (clients are not affected). The issue is fixed in FreeRDP 2.7.0. Open questions: no explicit exploitation details in the provided documents; no additional ...

CVE-2022-24882 Server side NTLM does not properly check parameters in FreeRDP

FreeRDP is a free implementation of the Remote Desktop Protocol RDP. In versions prior to 2.7.0, NT LAN Manager NTLM authentication does not properly abort when someone provides and empty password value. This issue affects FreeRDP based RDP Server implementations. RDP clients are not affected. Th...

CVE-2022-24883

CVE-2022-24883 affects FreeRDP when used as an RDP server authentication backend against a SAM database/file. Prior to version 2.7.0, authentication against an invalid SAM path could succeed for invalid credentials, meaning that RDP server implementations using FreeRDP to authenticate against a S...

CVE-2022-24882

FreeRDP is a free implementation of the Remote Desktop Protocol RDP. In versions prior to 2.7.0, NT LAN Manager NTLM authentication does not properly abort when someone provides and empty password value. This issue affects FreeRDP based RDP Server implementations. RDP clients are not affected. Th...

CVE-2022-24883 FreeRDP Server authentication might allow invalid credentials to pass

FreeRDP is a free implementation of the Remote Desktop Protocol RDP. Prior to version 2.7.0, server side authentication against a SAM file might be successful for invalid credentials if the server has configured an invalid SAM file path. FreeRDP based clients are not affected. RDP server...

April 25, 2022—KB5012637 (OS Build 20348.681) Preview

None None...

CVE-2022-1342

A lack of password masking in Devolutions Remote Desktop Manager allows physically proximate attackers to observe sensitive data. A caching issue can cause sensitive fields to sometimes stay revealed when closing and reopening a panel, which could lead to involuntarily disclosing sensitive...

April 21, 2022—KB5012636 (OS Build 17763.2867) Preview

None None...

CVE-2022-24533

Remote Desktop Protocol Remote Code Execution Vulnerability...

CVE-2022-24533

Remote Desktop Protocol Remote Code Execution Vulnerability...

CVE-2022-24533

Remote Desktop Protocol Remote Code Execution Vulnerability...

Remote code execution

Remote Desktop Protocol Remote Code Execution Vulnerability...

CVE-2022-24533

Technical details about CVE-2022-24533 (affected products, components, root cause, versions, fixes) are not provided in the connected documents. The available materials only reiterate a Remote Desktop Protocol RCE without specifics. Monitor for updates.

CVE-2022-24533 Remote Desktop Protocol Remote Code Execution Vulnerability

...

Microsoft Windows Remote Desktop Protocol Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Windows Remote Desktop Protocol RDP, an application used by Microsoft to connect to remote Windows desktops. The vulnerability stems from the failure of a networked system or product to properly filter special elements of code segments...

Remote Desktop Protocol Remote Code Execution Vulnerability

...

KLA12502 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in...

PT-2022-2870 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to the Remote Desktop Protocol implementation in Microsoft Windows, specifically concerning incorrect code generation management. This can be exploited by a...

Microsoft Windows Remote Desktop Protocol 代码注入漏洞

A remote code execution vulnerability exists in Microsoft Windows Remote Desktop Protocol RDP, an application used by Microsoft to connect to remote Windows desktops. The vulnerability stems from the failure of a networked system or product to properly filter special elements of code segments...

Into the Breach: Breaking Down 3 SaaS App Cyber Attacks in 2022

During the last week of March, three major tech companies - Microsoft, Okta, and HubSpot - reported significant data breaches. DEV-0537, also known as LAPSUS$, performed the first two. This highly sophisticated group utilizes state-of-the-art attack vectors to great success. Meanwhile, the group...