Impact

Successful exploitation allows an attacker to gain unauthorized access to credentials stored by Rocket Remote Desktop. This potentially impacts all sectors relying on the software for remote server management. Exposure of these credentials can facilitate lateral movement, privilege escalation, and full control over the remote systems managed by the compromised client, creating a significant risk to the security of the host environment.

Recommendation

• Update Rocket Remote Desktop to version 2024.3.0.25206 or later immediately.
• Review access logs and configuration file modification timestamps for unauthorized access to the application data directory.
• Rotate any credentials previously stored within Rocket Remote Desktop if unauthorized access to the system is suspected.