📧 info@ciso.sa | 📱 +966550939344 | Riyadh, Kingdom of Saudi Arabia
🔧 Scheduled Maintenance — Saturday 2:00-4:00 AM AST. Some features may be temporarily unavailable.    ●   
💎
Pro Plan 50% Off Unlock all AI features, unlimited reports, and priority support. Upgrade
Search Center
ESC to close
Global data_breach Software/SaaS CRITICAL 1h Global vulnerability Technology / Web Services HIGH 3h Global vulnerability Consumer Electronics / Technology CRITICAL 5h Global ransomware Enterprise / All Sectors CRITICAL 5h Global data_breach Government CRITICAL 7h Global malware Multiple sectors / General public HIGH 7h Global vulnerability Technology and Software Development CRITICAL 8h Global malware,vulnerability,apt Technology, Cloud Services, Consumer Electronics HIGH 8h Global malware Web Hosting and Content Management HIGH 8h Global vulnerability Information Technology and Network Infrastructure CRITICAL 9h Global data_breach Software/SaaS CRITICAL 1h Global vulnerability Technology / Web Services HIGH 3h Global vulnerability Consumer Electronics / Technology CRITICAL 5h Global ransomware Enterprise / All Sectors CRITICAL 5h Global data_breach Government CRITICAL 7h Global malware Multiple sectors / General public HIGH 7h Global vulnerability Technology and Software Development CRITICAL 8h Global malware,vulnerability,apt Technology, Cloud Services, Consumer Electronics HIGH 8h Global malware Web Hosting and Content Management HIGH 8h Global vulnerability Information Technology and Network Infrastructure CRITICAL 9h Global data_breach Software/SaaS CRITICAL 1h Global vulnerability Technology / Web Services HIGH 3h Global vulnerability Consumer Electronics / Technology CRITICAL 5h Global ransomware Enterprise / All Sectors CRITICAL 5h Global data_breach Government CRITICAL 7h Global malware Multiple sectors / General public HIGH 7h Global vulnerability Technology and Software Development CRITICAL 8h Global malware,vulnerability,apt Technology, Cloud Services, Consumer Electronics HIGH 8h Global malware Web Hosting and Content Management HIGH 8h Global vulnerability Information Technology and Network Infrastructure CRITICAL 9h
Vulnerabilities

CVE-2026-33952

Medium ⚡ Exploit Available
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, an unvalidated auth_length field read from the network triggers a WINPR_ASSERT() failure in rts_read_auth_veri
CWE-617 — Weakness Type
Published: Mar 30, 2026  ·  Modified: Apr 2, 2026  ·  Source: NVD
CVSS v3
6.5
🔗 NVD Official
📄 Description (English)

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, an unvalidated auth_length field read from the network triggers a WINPR_ASSERT() failure in rts_read_auth_verifier_no_checks(), causing any FreeRDP client connecting through a malicious RDP Gateway to crash with SIGABRT. This is a pre-authentication denial of service affecting all FreeRDP clients using RPC-over-HTTP gateway transport. The assertion is active in default release builds (WITH_VERBOSE_WINPR_ASSERT=ON). This issue has been patched in version 3.24.2.

🤖 AI Executive Summary

FreeRDP versions prior to 3.24.2 contain a denial of service vulnerability where an unvalidated auth_length field in RDP Gateway connections triggers an assertion failure, crashing FreeRDP clients. This pre-authentication DoS affects all FreeRDP clients using RPC-over-HTTP gateway transport.

📄 Description (Arabic)

يؤثر هذا الضعف على عملاء FreeRDP الذين يتصلون عبر بوابات RDP ضارة، حيث يقرأ حقل auth_length غير المتحقق منه من الشبكة ويؤدي إلى فشل WINPR_ASSERT() في دالة rts_read_auth_verifier_no_checks(). يحدث هذا الهجوم قبل المصادقة، مما يسمح بحجب الخدمة من قبل المهاجمين غير المصرح لهم.

🤖 ملخص تنفيذي (AI)

إصدارات FreeRDP السابقة للإصدار 3.24.2 تحتوي على ثغرة حجب الخدمة حيث يؤدي حقل auth_length غير المتحقق منه في اتصالات بوابة RDP إلى فشل التأكيد، مما يتسبب في توقف عملاء FreeRDP. يؤثر هذا الهجوم قبل المصادقة على جميع عملاء FreeRDP الذين يستخدمون نقل بوابة RPC-over-HTTP.

🤖 AI Intelligence Analysis Analyzed: May 12, 2026 21:37
🇸🇦 Saudi Arabia Impact Assessment
Saudi Relevance: high
🏢 Affected Saudi Sectors
telecom government banking healthcare
🎯 MITRE ATT&CK Techniques
⚖️ Saudi Risk Score (AI)
6.0
/ 10.0
🔧 Remediation Steps (English)
Upgrade FreeRDP to version 3.24.2 or later immediately. For organizations unable to upgrade immediately, restrict RDP Gateway access through network segmentation and firewall rules, disable RPC-over-HTTP gateway transport if not required, and monitor for unexpected client crashes or SIGABRT signals.
🔧 خطوات المعالجة (العربية)
قم بترقية FreeRDP إلى الإصدار 3.24.2 أو أحدث على الفور. بالنسبة للمنظمات غير القادرة على الترقية فوراً، قيد الوصول إلى بوابة RDP من خلال تقسيم الشبكة وقواعد جدار الحماية، وعطل نقل بوابة RPC-over-HTTP إذا لم يكن مطلوباً، وراقب أعطال العملاء غير المتوقعة.
📋 Regulatory Compliance Mapping
🟢 NCA ECC 2024
A.7.1 A.12.6 A.16.1
🔵 SAMA CSF
ID.BE-5 PR.DS-2 DE.CM-1
🟡 ISO 27001:2022
A.12.2.1 A.12.6.1 A.13.1.1
📦 Affected Products / CPE 1 entries
freerdp:freerdp
📊 CVSS Score
6.5
/ 10.0 — Medium
📊 CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Attack VectorN — None / Network
Attack ComplexityL — Low / Local
Privileges RequiredN — None / Network
User InteractionR — Required
ScopeU — Unchanged
ConfidentialityN — None / Network
IntegrityN — None / Network
AvailabilityH — High
📋 Quick Facts
Severity Medium
CVSS Score6.5
CWECWE-617
EPSS0.04%
Exploit ✓ Yes
Patch ✓ Yes
Published 2026-03-30
Source Feed nvd
Views 4
🇸🇦 Saudi Risk Score
6.0
/ 10.0 — Saudi Risk
Priority: MEDIUM
🏷️ Tags
exploit-available patch-available CWE-617
Share this CVE

💬 Comments

0
Loading comments
📣 Found this valuable?
Share it with your cybersecurity network
in LinkedIn 𝕏 X / Twitter 💬 WhatsApp ✈ Telegram
🍪 Privacy Preferences
CISO Consulting — Compliant with Saudi Personal Data Protection Law (PDPL)
We use cookies and similar technologies to provide the best experience on our platform. You can choose which types you accept.
🔒
Essential Always On
Required for the website to function properly. Cannot be disabled.
📋 Sessions, CSRF tokens, authentication, language preferences
📊
Analytics
Help us understand how visitors use the site and improve performance.
📋 Page views, session duration, traffic sources, performance metrics
⚙️
Functional
Enable enhanced features like content personalization and preferences.
📋 Dark/light theme, font size, custom dashboards, saved filters
📣
Marketing
Used to deliver content and ads relevant to your interests.
📋 Campaign tracking, retargeting, social media analytics
Privacy Policy →
CISO AI Assistant
Ask anything · Documents · Support
🔐

Introduce Yourself

Enter your details to access the full assistant

Your info is private and never shared
💬
CyberAssist
Online · responds in seconds
5 / 5
🔐 Verify Your Identity

Enter your email to receive a verification code before submitting a support request.

Enter to send · / for commands 0 / 2000
CISO AI · Powered by Anthropic Claude
✦ Quick Survey Help Us Improve CISO Consulting Your feedback shapes the future of our platform — takes less than 2 minutes.
⚠ Please answer this question to continue

How would you rate your overall experience with our platform?

Rate from 1 (poor) to 5 (excellent)

🎉
Thank you!
Your response has been recorded.