CVE-2005-1794: Microsoft Terminal Server using Remote Desktop Protocol (RDP) 5.2 stores an RSA private key in mstlsapi.dll...

Security readout for executives and security teams

This older RDP flaw means some Microsoft Terminal Server RDP 5.2 deployments used a private key embedded in mstlsapi.dll. An attacker who can intercept a connection could impersonate a legitimate server and read or alter remote desktop traffic. Likely limited to legacy Microsoft Terminal Server environments using RDP 5.2. The source bundle does not provide complete affected product/version mapping. Internet-exposed RDP increases business risk, but exploitation requires a man-in-the-middle position rather than direct server compromise. Prioritize if legacy RDP 5.2 remains in use, especially across untrusted networks. This is not a new KEV-confirmed exploitation event, but it can expose sensitive sessions and credentials in legacy environments. Mitigation focus: Identify systems still using Microsoft Terminal Server RDP 5.2.; Check Microsoft or vendor guidance for supported updates or replacement paths.; Restrict RDP access to trusted networks or VPN paths..

Prepared

May 22, 2026, 11:18 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.