CVE-2023-4373
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk47th percentile - higher than 47% of all known CVEs
Summary
Inadequate validation of permissions when employing remote tools and macros within Devolutions Remote Desktop Manager versions 2023.2.19 and earlier permits a user to initiate a connection without proper execution rights via the remote tools feature.
Risk Assessment
The organization may be exposed to unauthorized access to systems, potentially leading to data breaches or other malicious activities.
Recommendation
It is recommended to update Devolutions Remote Desktop Manager to the latest version to ensure proper permission validation and minimize risk.
Original NVD description (English source)
Inadequate validation of permissions when employing remote tools and macros within Devolutions Remote Desktop Manager versions 2023.2.19 and earlier permits a user to initiate a connection without proper execution rights via the remote tools feature.