CVE-2024-11621: High severity devolutions remote desktop manager vulnerability
Missing certificate validation in Devolutions Remote Desktop Manager on macOS, iOS, Android, Linux allows an attacker to intercept and modify encrypted communications via a man-in-the-middle attack.
Versions affected are : Remote Desktop Manager macOS 2024.3.9.0 and earlier Remote Desktop Manager Linux 2024.3.2.5 and earlier Remote Desktop Manager Android 2024.3.3.7 and earlier Remote Desktop Manager iOS 2024.3.3.0 and earlier
Remote Desktop Manager Powershell 2024.3.6.0 and earlier
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-11621?
CVE-2024-11621 is considered a high severity vulnerability due to the risk of man-in-the-middle attacks.
How do I fix CVE-2024-11621?
To fix CVE-2024-11621, upgrade your Devolutions Remote Desktop Manager to the latest version that includes the certificate validation fix.
Which versions are affected by CVE-2024-11621?
CVE-2024-11621 affects Remote Desktop Manager versions earlier than 2024.3.9.0 for macOS, 2024.3.2.5 for Linux, 2024.3.3.7 for Android, and 2024.3.3.0 for iOS.
What can an attacker do with CVE-2024-11621?
An attacker can intercept and modify encrypted communications due to the missing certificate validation in CVE-2024-11621.
Which platforms are impacted by CVE-2024-11621?
CVE-2024-11621 impacts Devolutions Remote Desktop Manager on macOS, iOS, Android, and Linux.