CVE-2024-11621

State: Published
Severity: 8.8 High
Published: Feb 10, 2025
Updated: Feb 12, 2025
Reserved: Nov 22, 2024

Description

Missing certificate validation in Devolutions Remote Desktop Manager on macOS, iOS, Android, Linux allows an attacker to intercept and modify encrypted communications via a man-in-the-middle attack.

Versions affected are : Remote Desktop Manager macOS 2024.3.9.0 and earlier Remote Desktop Manager Linux 2024.3.2.5 and earlier Remote Desktop Manager Android 2024.3.3.7 and earlier Remote Desktop Manager iOS 2024.3.3.0 and earlier

Remote Desktop Manager Powershell 2024.3.6.0 and earlier

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-295 Improper Certificate Validation

Affected Products

Product	Versions
Remote Desktop ManagerDevolutions	2024.3.9.0 and earlierAffected
Remote Desktop ManagerDevolutions	2024.3.2.5 and earlierAffected
Remote Desktop ManagerDevolutions	2024.3.3.7 and earlierAffected
Remote Desktop ManagerDevolutions	2024.3.3.0 and earlierAffected
Remote Desktop ManagerDevolutions	2024.3.6.0 and earlierAffected

References

https://devolutions.net/security/advisories/DEVO-2025-0001/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.