CRITICAL🇵🇱 Wersja polska

CVE-2023-4373

CVSS 9.8v3.1pub. 2023-08-21upd. 2024-11-21

Inadequate validation of permissions when employing remote tools and macros within Devolutions Remote Desktop Manager versions 2023.2.19 and earlier permits a user to initiate a connection without proper execution rights via the remote tools feature.

🇵🇱 Read Polish description →

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Devolutions Remote Desktop Manager
APP
Devolutions
≤ 2023.2.19

🔵

CHECK WITH VENDOR

No clear patch data available. Check vendor references.

Tags

Auth Bypass

CWE

References

devolutions.net/security/advisories/DEVO-2023-0015/…

devolutions.net/security/advisories/DEVO-2023-0015/…

Related vulnerabilities

CVE-2026-2590CRITICAL9.8PL ✓same product

Błędne egzekwowanie zakazu zapisywania haseł w Devolutions Remote Desktop Manager

CVE-2024-6057CRITICAL9.8PL ✓same product

Pominięcie hasła master vault w Devolutions Remote Desktop Manager

CVE-2023-6593CRITICAL9.8PL ✓same product

Pomijanie uprawnień po stronie klienta w Devolutions Remote Desktop Manager na iOS

CVE-2023-5766CRITICAL9.8PL ✓same product

RCE w Remote Desktop Manager — atak przez spreparowany pakiet TCP

CVE-2023-5765CRITICAL9.8PL ✓same product

Nieprawidłowa kontrola dostępu w Remote Desktop Manager — obejście uprawnień