CVE-2025-1193 — Devolutions / Remote Desktop Manager

CVE-2025-1193

Devolutions / Remote Desktop Manager PUBLISHED

Description (CNA)

Improper host validation in the certificate validation component in Devolutions Remote Desktop Manager on 2024.3.19 and earlier on Windows allows an attacker to intercept and modify encrypted communications via a man-in-the-middle attack by presenting a certificate for a different host.

Affected (CNA)

Vendor / product	Versions
Devolutions / Remote Desktop Manager	affected 0 through 2024.3.19

CWE

CWE-295

References

https://devolutions.net/security/advisories/DEVO-2025-0001/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.