CVE-2025-1193CWE-295

Improper host validation in the certificate validation component in Devolutions Remote Desktop Manager on 2024.3.19 and earlier on Windows allows an attacker…

High · published February 10, 2025

CVSS v3.1
8.1
EPSS
0%
Percentile
31.6
In the wild
Unconfirmed
What it is

Improper host validation in the certificate validation component in Devolutions Remote Desktop Manager on 2024.3.19 and earlier on Windows allows an attacker to intercept and modify encrypted communications via a man-in-the-middle attack

by presenting a certificate for a different host.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00388 · 31.6th percentile
Weakness
CWE-295 · Improper Certificate Validation
Published
2025-02-10T13:55Z
EPSS history
Timeline
  • 10 FEB 13:55Z
    Improper host validation in the certificate validation component in Devolutions Remote Desktop Manager on 2024.3.19 and earlier on Windows allows an attacker…
    cvelistv5