CVE-2024-11621 — Devolutions / Remote Desktop Manager

Description (CNA)

Missing certificate validation in Devolutions Remote Desktop Manager on macOS, iOS, Android, Linux allows an attacker to intercept and modify encrypted communications via a man-in-the-middle attack. Versions affected are : Remote Desktop Manager macOS 2024.3.9.0 and earlier Remote Desktop Manager Linux 2024.3.2.5 and earlier Remote Desktop Manager Android 2024.3.3.7 and earlier Remote Desktop Manager iOS 2024.3.3.0 and earlier Remote Desktop Manager Powershell 2024.3.6.0 and earlier

Affected (CNA)

Vendor / product	Versions
Devolutions / Remote Desktop Manager	affected 0 through 2024.3.9.0
Devolutions / Remote Desktop Manager	affected 0 through 2024.3.2.5
Devolutions / Remote Desktop Manager	affected 0 through 2024.3.3.7
Devolutions / Remote Desktop Manager	affected 0 through 2024.3.3.0
Devolutions / Remote Desktop Manager	affected 0 through 2024.3.6.0

CWE

CWE-295

References

https://devolutions.net/security/advisories/DEVO-2025-0001/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.