RustDesk
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 22 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from February 6, 2024 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →rustdesk-api through 2.7 Authorization Bypass via POST /api/sysinfo
RustDesk before 1.5.0 One-Way File Transfer Bypass
RustDesk before 1.5.0 Missing Authorization Check on Incoming File Clipboard Messages
RustDesk through 1.4.9 Heap Buffer Overflow via Unvalidated CLIPRDR FileContentsResponse Length
RustDesk Missing Session Scope Enforcement Allows Out-of-Scope Control Message Injection
RustDesk Encrypts Local Passwords with World-Readable Machine ID and Fixed Zero Nonce (XSalsa20-Poly1305)
RustDesk hbbs/hbbr Servers Broker Connections Without Any Authorization Check
RustDesk Client Can Orphan API Channel to Ignore All Admin Commands and ACL Policies
RustDesk Server Controls All Handshake Entropy (Salt/Challenge), Enabling Offline Brute-Force
RustDesk Auth Proof Uses Server-Controlled Salt/Challenge and Fast Double-SHA256, Enabling Offline Brute-Force
Monitor RustDesk in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.