Portal
Forum
Devolutions Force
Devolutions Hub Business
Devolutions Hub Personal
Devolutions Send
Devolutions Academy
RDM
Workspace
Launcher
Security & Compliance
DEVO-2025-0001
Zusammenfassung
Remote Desktop Managers on all platforms had vulnerabilities in their certificate validation logic.
Specifically, on the Windows platform, the certificate validation didn't validate the host.
On the other platforms, the certificate validation was missing and would accept any certificate without prompting the users.
Betroffene Produkte
Remote Desktop Manager Windows 2024.3.19 and earlier
Remote Desktop Manager macOS 2024.3.9.0 and earlier
Remote Desktop Manager Linux 2024.3.2.5 and earlier
Remote Desktop Manager Android 2024.3.3.7 and earlier
Remote Desktop Manager iOS 2024.3.3.0 and earlier
Remote Desktop Manager Powershell 2024.3.6.0 and earlier
Änderungsprotokoll
10/02/2025 - Initial publication
Schweregrad
High
Produkt
Remote Desktop Manager
Behobene Version
See vulnerabilities for fixed versions
Improper host validation in the certificate validation in Remote Desktop Manager Windows
Beschreibung
Improper host validation in the certificate validation component in Devolutions Remote Desktop Manager on 2024.3.19 and earlier on Windows allows an attacker to intercept and modify encrypted communications via a man-in-the-middle attackby presenting a certificate for a different host.
Behebungen und Workarounds
Upgrade to Remote Desktop Manager Windows 2024.3.20.0 or higher
Schweregrad
8.5 High - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Betroffene Produkte
Remote Desktop Manager Windows 2024.3.19.0 and earlier
CVE(s)
CVE-2025-1193
Missing certificate validation in Devolutions Remote Desktop Manager
Beschreibung
Missing certificate validation in Devolutions Remote Desktop Manager on macOS, iOS, Android, Linux allows an attacker to intercept and modify encrypted communications via a man-in-the-middle attack.
Behebungen und Workarounds
Upgrade Remote Desktop Manager macOS to 2024.3.10.3 or higherUpgrade Remote Desktop Manager Linux to 2024.3.2.9 or higherUpgrade Remote Desktop Manager Android to 2024.3.4.2 or higherUpgrade Remote Desktop Manager iOS to 2024.3.4.0 or higherUpgrade Remote Desktop Manager Powershell to 2024.3.7.0 or higher
Schweregrad
8.6 High - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Betroffene Produkte
Remote Desktop Manager macOS 2024.3.9.0 and earlier
Remote Desktop Manager Linux 2024.3.2.5 and earlier
Remote Desktop Manager Android 2024.3.3.7 and earlier
Remote Desktop Manager iOS 2024.3.3.0 and earlier
Remote Desktop Manager Powershell 2024.3.6.0 and earlier
CVE(s)
CVE-2024-11621
