CVE-2024-11621

CVE-2024-11621

Vendor Devolutions
Product Remote Desktop Manager
Weakness CWE-295
Published February 10, 2025
Last update February 12, 2025
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Missing certificate validation in Devolutions Remote Desktop Manager on macOS, iOS, Android, Linux allows an attacker to intercept and modify encrypted communications via a man-in-the-middle attack. Versions affected are : Remote Desktop Manager macOS 2024.3.9.0 and earlier Remote Desktop Manager Linux 2024.3.2.5 and earlier Remote Desktop Manager Android 2024.3.3.7 and earlier Remote Desktop Manager iOS 2024.3.3.0 and earlier Remote Desktop Manager Powershell 2024.3.6.0 and earlier

Key dates

02Disclosure timeline

February 10, 2025 CVE published
February 12, 2025 Record updated