Executive Summary

This vulnerability is a Use of a Broken or Risky Cryptographic Algorithm issue found in the RustDesk Client (rustdesk-client) across multiple platforms including Windows, MacOS, Linux, iOS, Android, and WebClient. It affects versions up to 1.4.5. The problem lies in certain program files and routines (flutter/lib/common.Dart, hbb_common/src/config.Rs, parseRustdeskUri(), importConfig()) that handle configuration import, URI scheme handling, and CLI config modules. Due to the use of weak or broken cryptographic algorithms, an attacker could retrieve embedded sensitive data from the client.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can lead to the unauthorized retrieval of sensitive data embedded within the RustDesk Client configuration or communication. Because the cryptographic algorithm used is broken or risky, attackers may exploit this weakness to access confidential information, potentially compromising the security and privacy of remote desktop sessions or stored credentials.

Useful 0 Not Useful 0

Compliance Impact

I don't know

Useful 0 Not Useful 0

Detection Guidance

The provided information does not include specific detection methods or commands to identify this vulnerability on a network or system.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, you should update RustDesk Client to a version later than 1.4.5, as the issue affects versions through 1.4.5.

Additionally, reviewing and adjusting the client configuration, especially related to cryptographic settings and imported configurations, may help reduce risk.

Using RustDesk Server Pro for encrypted configuration import and managing security settings through the client interface can also enhance protection.

Useful 0 Not Useful 0