目標達成 すべての支援者に感謝 — 100%達成しました!

目標: 1000 CNY · 調達済み: 1336 CNY

100%

rustdesk-client 厂商漏洞列表 / CVE 中文分析 10

rustdesk-client 厂商相关 10 条 CVE 漏洞,含 AI 中文分析、POC、CVSS 评分与受影响产品。

该远程桌面软件客户端提供跨平台远程访问功能,支持Windows、Linux和macOS系统。历史上常见漏洞包括远程代码执行、权限提升和跨站脚本攻击,其中10条CVE记录显示其安全风险主要集中在未经验证的输入处理和权限控制缺陷。2022年曾曝出高危RCE漏洞,允许攻击者通过特制数据包执行任意代码,后通过版本更新修复。其开源特性虽便于审计,但频繁的安全更新也反映出潜在的安全挑战。

10 件の結果 / 10フィルターをクリア
上位製品 rustdesk-client: RustDesk Client
CVE IDタイトルCVSS深刻度公開日
CVE-2026-30785 RustDesk Encrypts Local Passwords with World-Readable Machine ID and Fixed Zero Nonce (XSalsa20-Poly1305) — RustDesk ClientCWE-257 6.2 -2026-03-05
CVE-2026-30783 RustDesk Client Can Orphan API Channel to Ignore All Admin Commands and ACL Policies — RustDesk ClientCWE-602 8.8 -2026-03-05
CVE-2026-30789 RustDesk Auth Proof Uses Server-Controlled Salt/Challenge and Fast Double-SHA256, Enabling Offline Brute-Force — RustDesk ClientCWE-916 8.4 -2026-03-05
CVE-2026-30798 RustDesk Client Accepts Unauthenticated stop-service Command via Strategy Payload — RustDesk ClientCWE-345 9.8 -2026-03-05
CVE-2026-30797 RustDesk rustdesk://config/ URI Silently Re-homes Client to Attacker-Controlled Server — RustDesk ClientCWE-862 8.1 -2026-03-05
CVE-2026-30796 RustDesk Client Transmits Preset Address Book Password Verbatim in Heartbeat Sync — RustDesk ClientCWE-522 6.2 -2026-03-05
CVE-2026-30795 RustDesk HTTP Client Silently Accepts Invalid TLS Certificates After Handshake Failure — RustDesk ClientCWE-319 7.5 -2026-03-05
CVE-2026-30793 RustDesk Flutter URI Handler Sets Permanent Password Without Privilege Check or User Confirmation — RustDesk ClientCWE-285 8.8 -2026-03-05
CVE-2026-30792 RustDesk Client Blindly Merges Unauthenticated Strategy Payloads, Bypassing Local Security Settings — RustDesk ClientCWE-345 7.4 -2026-03-05
CVE-2026-30791 RustDesk Client Accepts Pseudo-Encrypted Config Strings Without Cryptographic Validation — RustDesk ClientCWE-327 9.8 -2026-03-05

本页汇总了 rustdesk-client 厂商截至目前公开的全部 10 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接,并附带 AI 生成的中文分析以便快速判断风险。