Security & compliance

Upholding the highest standards to protect your data and ensure trust.

DEVO-2024-0004

Remote Desktop Manager is affected by multiple vulnerabilities.

Affected Products

Remote Desktop Manager
Windows 2024.1.12 and earlier

Change Log

2024-03-13 - Initial publication

5.9 Medium - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Terrapin vulnerability in Remote Desktop Manager

Remote Desktop Manager is affected by the Terrapin vulnerability in the following modules :

  • SSH Sessions.
  • Embedded OpenSSH client used for Powershell Remoting.

We have updated our implementations to include the security fixes.

For more information about the Terrapin vulnerability please consult the following :
https://terrapin-attack.com/

Affected Products

CVE(s)

CVE-2023-48795

Remediation and Workarounds

Upgrade to Remote Desktop Manager 2024.1.15 or higher

2.3 - Low CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Improper cleanup in temporary file handling component.

Improper cleanup in temporary file handling component in Devolutions Remote Desktop Manager 2024.1.12 and earlier on Windows allows an attacker that compromised a user endpoint, under specific circumstances, to access sensitive information via residual files in the temporary directory.

Affected Products

CVE(s)

CVE-2024-2403

Remediation and Workarounds

Upgrade to Remote Desktop Manager 2024.1.15 or higher

Devolutions Logo

Helping organizations control the IT chaos by providing highly-secure password, remote connection and privileged access management solutions.

DEVOLUTIONS

Legal & privacy | infos@devolutions.net

All rights reserved © 2025 Devolutions