PT-2022-26641 · Devolutions · Devolutions Remote Desktop Manager

Published 2022-12-20 · Updated 2023-08-08 · CVE-2022-4287

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Devolutions Remote Desktop Manager versions 2022.3.26 and earlier

Description The issue allows a malicious user to bypass the local application lock feature, gaining access to the application. This can be exploited by malicious users to access the application without proper authentication.

Recommendations For Devolutions Remote Desktop Manager versions 2022.3.26 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2022-4287

Affected Products

Devolutions Remote Desktop Manager

References · 5

• https://osv.dev/vulnerability/CVE-2022-4287 · Vendor Advisory
• https://devolutions.net/security/advisories/DEVO-2022-0011 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-4287 · Security Note
• https://t.me/cibsecurity/55061 · Telegram Post
• https://t.me/cvenotify/40360 · Telegram Post