CVE-2024-25140

A default installation of RustDesk 1.2.3 on Windows places a WDKTestCert certificate under Trusted Root Certification Authorities with Enhanced Key Usage of Code Signing (1.3.6.1.5.5.7.3.3), valid from 2023 until 2033. This is potentially unwanted, e.g., because there is no public documentation of security measures for the private key, and arbitrary software could be signed if the private key were to be compromised. NOTE: the vendor's position is "we do not have EV cert, so we use test cert as a workaround." Insertion into Trusted Root Certification Authorities was the originally intended behavior, and the UI ensured that the certificate installation step (checked by default) was visible to the user before proceeding with the product installation.

• CWE-295
• CWE-295

• https://github.com/rustdesk/rustdesk/discussions/6444Exploit, Issue Tracking
• https://news.ycombinator.com/item?id=39256493Issue Tracking
• https://serverfault.com/questions/837994Issue Tracking, Technical Description
• https://github.com/rustdesk/rustdesk/discussions/6444Exploit, Issue Tracking
• https://news.ycombinator.com/item?id=39256493Issue Tracking
• https://serverfault.com/questions/837994Issue Tracking, Technical Description

Published

Feb 6, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-25133A flaw was found in the Hive ClusterDeployments resource in …8.8
• CVE-2024-25136 There is a function in AutomationDirect C-MORE EA9 HMI that…7.5
• CVE-2024-25137 In AutomationDirect C-MORE EA9 HMI there is a program that …4.3
• CVE-2024-25138 In AutomationDirect C-MORE EA9 HMI, credentials used by t…6.5
• CVE-2024-25139In TP-Link Omada er605 1.0.1 through (v2.6) 2.2.3, a cloud-b…10
• CVE-2024-2514A vulnerability classified as critical was found in MAGESH-K…9.8
• CVE-2024-25141When ssl was enabled for Mongo Hook, default settings includ…9.1
• CVE-2024-25142Use of Web Browser Cache Containing Sensitive Information vu…5.5
• CVE-2024-25143The Document and Media widget In Liferay Portal 7.2.0 throug…6.5
• CVE-2024-25144The IFrame widget in Liferay Portal 7.2.0 through 7.4.3.26, …6.5
• CVE-2024-25145Stored cross-site scripting (XSS) vulnerability in the Porta…5.4
• CVE-2024-25146Liferay Portal 7.2.0 through 7.4.1, and older unsupported ve…5.3