CVE-2025-2562 — Devolutions / Remote Desktop Manager

CVE-2025-2562

Devolutions / Remote Desktop Manager PUBLISHED

Description (CNA)

Insufficient logging in the autotyping feature in Devolutions Remote Desktop Manager on Windows allows an authenticated user to use a stored password without generating a corresponding log event, via the use of the autotyping functionality. This issue affects Remote Desktop Manager versions from 2025.1.24 through 2025.1.25, and all versions up to 2024.3.29.

Affected (CNA)

Vendor / product	Versions
Devolutions / Remote Desktop Manager	affected 2025.1.24 through 2025.1.25; affected 0 through 2024.3.29

CWE

CWE-778

References

https://devolutions.net/security/advisories/DEVO-2025-0005/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.