I have read several sources indicating that RDP may have some vulnerabilities. Without delving into that, is RDP wrapper any more or less secure than the built-in RDP, when it is enabled?
I read several sources, including (see below) 1) this, 2) this, and others.
Many mention security issues with RDP Wrapper.
On one hand, I am not certain about possible bias. As an example, anyviewer.com is a site that provides "A safe alternative to RDP wrapper" ("here we recommend AnyViewer")... That is at least an orange light for bias. Likewise, I wouldn't know about ncomputing.
On the other hand, and assuming the technical arguments behind the issues mentioned are correct, they do not mention if those same issues are or are not present with the built-in RDP, when it is not disabled. So this is another route for concealing potential bias against RDP Wrapper.
In the example links:
- "RDP Wrapper adds a weakness to the system by opening a gateway". Does the built-in RDP not open a gateway? Is there a complementary way to avoid this?
- "It opens a gateway..." Similarly, does the built-in RDP not open a gateway?
"Windows security update breaks RDP Wrapper" This is a reference to non-specified sources, and it does not specify which updates break RDPW.
"ServHelper is an example of malware..." It does not clarify, nor does it provide references, on whether using RDPW leaves the system in a state more vulnerable to ServHelper than the built-in RDP.
My conclusion is that this is a very sloppy description, of possibly relevant information... but I don't know.
- Project README. I don't see any clear indication of vulnerability issues. I wouldn't expect them to be listed upfront in their own site, anyway.
I.e., is there any known (versus potential) added, or suppressed, vulnerability brought about by RDP Wrapper, that would not be present in a similar (even if not exactly the same) system with the built-in RDP, when it is enabled?
I am using Windows 11, in case the OS is of any relevance for the question.