Vulnerability Description
Improper host validation in the certificate validation component in Devolutions Remote Desktop Manager on 2024.3.19 and earlier on Windows allows an attacker to intercept and modify encrypted communications via a man-in-the-middle attack by presenting a certificate for a different host.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Devolutions | Remote Desktop Manager | < 2024.3.20.0 |
Related Weaknesses (CWE)
References
- https://devolutions.net/security/advisories/DEVO-2025-0001/Vendor Advisory
FAQ
What is CVE-2025-1193?
CVE-2025-1193 is a vulnerability with a CVSS score of 8.1 (HIGH). Improper host validation in the certificate validation component in Devolutions Remote Desktop Manager on 2024.3.19 and earlier on Windows allows an attacker to intercept and modify encrypted communic...
How severe is CVE-2025-1193?
CVE-2025-1193 has been rated HIGH with a CVSS base score of 8.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-1193?
Check the references section above for vendor advisories and patch information. Affected products include: Devolutions Remote Desktop Manager.