Published: 26/04/2022 Updated: 07/11/2023

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). In versions before 2.7.0, NT LAN Manager (NTLM) authentication does not properly abort when someone provides and empty password value. This issue affects FreeRDP based RDP Server implementations. RDP clients are not affected. The vulnerability is patched in FreeRDP 2.7.0. There are currently no known workarounds.

Vulnerable Product	Search on Vulmon	Subscribe to Product
freerdp freerdp
fedoraproject fedora 34
fedoraproject extra packages for enterprise linux 8.0
fedoraproject fedora 35
fedoraproject fedora 36

FreeRDP could allow unintended access to network services ...

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP) In versions prior to 270, NT LAN Manager (NTLM) authentication does not properly abort when someone provides and empty password value This issue affects FreeRDP based RDP Server implementations RDP clients are not affected The vulnerability is patched in FreeRDP 270 Ther ...

freerdp server with NTLM authentication does not properly abort on empty password ...

NVD-CWE-Other https://github.com/FreeRDP/FreeRDP/releases/tag/2.7.0 https://gitlab.gnome.org/GNOME/gnome-remote-desktop/-/issues/95 https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-6x5p-gp49-3jhh https://github.com/FreeRDP/FreeRDP/pull/7750 https://security.gentoo.org/glsa/202210-24 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AELSWWBAM2YONRPGLWVDY6UNTLJERJYL/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DOYKBQOHSRM7JQYUIYUWFOXI2JZ2J5RD/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PZWR6KSIKXO4B2TXBB3WH6YTNYHN46OY/https://ubuntu.com/security/notices/USN-5461-1 https://nvd.nist.gov https://security.archlinux.org/CVE-2022-24882

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2022-24882

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect