CyberRota Analysis
AI-GeneratedFreeRDP versions prior to 3.30.0 are vulnerable to a flaw in the server-side RDSTLS implementation, which allows an unauthenticated remote client to bypass critical authentication checks, including RedirectionGuid, username, domain, and password. This vulnerability poses a high risk of unauthorized access to systems using FreeRDP for remote desktop connections. Organizations utilizing FreeRDP should prioritize upgrading to version 3.30.0 or later to mitigate this security risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP server-side RDSTLS in libfreerdp/core/rdstls.c accepts an attacker-supplied RDSTLS_TYPE_CAPABILITIES PDU while rdstls_server_authenticate is waiting for RDSTLS_TYPE_AUTHREQ, leaving resultCode at RDSTLS_RESULT_SUCCESS and allowing a remote unauthenticated client to bypass the RedirectionGuid, username, domain, or password checks. This issue is fixed in version 3.30.0.