CyberRota Analysis
AI-GeneratedRustDesk versions prior to 1.5.0 on Windows are vulnerable due to inadequate enforcement of the one-way file transfer option, which allows authenticated peers to access files from the host clipboard. This flaw enables attackers to exploit the system by sending specific requests to retrieve copied files, potentially leading to unauthorized data exposure. Organizations using RustDesk for remote desktop services should prioritize addressing this vulnerability to safeguard sensitive clipboard data.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
RustDesk before 1.5.0 on Windows fails to enforce the one-way file transfer option against peer clipboard file requests, allowing authenticated peers to read files from the host clipboard. Attackers can send FormatDataRequest and FileContentsRequest messages to retrieve copied files by guessing the FileGroupDescriptorW format identifier.