CVE-2025-1193 - AskarLabs CVE Database

CVE-2025-1193

Vendor Devolutions

Product Remote Desktop Manager

Weakness CWE-295

Published February 10, 2025

Last update February 10, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Improper host validation in the certificate validation component in Devolutions Remote Desktop Manager on 2024.3.19 and earlier on Windows allows an attacker to intercept and modify encrypted communications via a man-in-the-middle attack by presenting a certificate for a different host.

Key dates

02Disclosure timeline

February 10, 2025 CVE published

February 10, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-1193 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/295.html

Related vulnerabilities

04Related CVE

CVE-2023-5594 Improper following of a certificate's chain of trust in ESET security products CVE-2023-38686 Sydent does not verify email server certificates CVE-2026-45745 Termix has improper certificate validation in Electron desktop client that enables MITM credential/token theft CVE-2026-1531 Foreman-kubevirt: foreman_kubevirt: man-in-the-middle due to insecure default ssl verification CVE-2017-2649