Path Traversal in Electerm RDP Client

Executive Summary

This vulnerability is a path traversal issue in the Electerm application's RDP clipboard file download feature. It allows a malicious RDP server to write attacker-controlled content outside the selected save directory by exploiting unsanitized server-controlled filenames. The issue occurs because the application passes the raw filename from the clipboard to the file system without proper validation.

Useful 0 Not Useful 0

Detection Guidance

Check Electerm version with 'electerm --version' or inspect installed package. Look for RDP file transfers with unusual filenames containing path traversal sequences like '../'. Monitor logs for attempts to write outside intended directories.

Useful 0 Not Useful 0

Impact Analysis

An attacker could exploit this to write arbitrary files outside the intended directory, potentially leading to code execution, data corruption, or unauthorized access to sensitive files. Since the attack is network-based and requires no privileges, any user connecting to a malicious RDP server could be affected.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could potentially violate compliance with GDPR and HIPAA by allowing unauthorized file writes outside designated directories. Attackers could exploit it to store malicious files in sensitive system locations, risking data integrity and confidentiality. GDPR requires protecting personal data from unauthorized access or alteration, while HIPAA mandates safeguarding protected health information. The flaw enables arbitrary file writes, which may lead to data breaches or unauthorized data exposure, directly conflicting with these standards.

Useful 0 Not Useful 0

Mitigation Strategies

Update Electerm to version 3.15.120 or later immediately. Avoid transferring files via RDP from untrusted servers. Disable clipboard sharing in RDP sessions if possible until patched.

Useful 0 Not Useful 0