Critical · published February 6, 2024
🚨 A default installation of RustDesk 1.2.3 on Windows sneaks a test certificate into the Trusted Root Certification Authorities, and that's a big deal! 🔥 Think of this like a fast-food restaurant handing out free meal coupons meant for staff instead of customers. If someone gets a hold of those coupons, they could feast without paying — that's how easily arbitrary software could be signed if this private key is compromised. An attacker with access to the private key could sign malicious software as if it were legitimate, leading to devastating consequences like system compromise or data theft. Imagine a situation where users unknowingly install harmful software, thinking it's safe — that's the magnitude of the risk here!
Think of this like a fast-food restaurant handing out free meal coupons meant for staff instead of customers. If someone gets a hold of those coupons, they could feast without paying — that's how easily arbitrary software could be signed if this private key is compromised. The vulnerability results from RustDesk's use of a test certificate marked for code signing, which is installed by default and lacks public security measures for the private key, potentially allowing an attacker to sign malicious code.
An attacker with access to the private key could sign malicious software as if it were legitimate, leading to devastating consequences like system compromise or data theft. Imagine a situation where users unknowingly install harmful software, thinking it's safe — that's the magnitude of the risk here! To mitigate this issue, remove the WDKTestCert from the Trusted Root Certification Authorities immediately and consider using a proper EV certificate for your installations. Stay updated with RustDesk's patches and configurations to avoid similar vulnerabilities in the future. You can tackle this! Follow these steps and ensure your systems are secure. 🛡️