CVE Feed

    Dashboard / CVE / CVE-2025-1193

    CVE-2025-1193

    Improper host validation in the certificate validation component in Devolutions Remote Desktop Manager on 2024.3.19 and earlier on Windows allows an attacker to intercept and modify encrypted communications via a man-in-the-middle attack by presenting a certificate for a different host.

    Published:Feb 10, 2025
    Last Modified:Mar 28, 2025
    EPS:Feb 10, 2025
    EPSS Score:0.00028
    CVSS Score:8.1

    Affected Products

    Vendor
    Devolutions
    Product
    Remote Desktop Manager

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-295 Improper Certificate Validation

    Related CVEs

    CVE-2026-78417 (CVSS 4.3) — Insufficient verification of data authenticity in the IronVNC client in Devolutions Remote Desktop Manager 202…
    CVE-2026-13372 (CVSS 7.2) — Incorrect link resolution by display name in the custom PowerShell VPN editor in Devolutions Remote Desktop Ma…
    CVE-2026-12162 (CVSS 5.5) — Improper host validation in the social login autofill feature in Devolutions Remote Desktop Manager 2026.2.8 …
    CVE-2026-12161 (CVSS 8.8) — Improper input validation in the SSH Elevate Shell feature allows an authenticated user with permission to cr…
    CVE-2026-2590 (CVSS 9.8) — Improper enforcement of the Disable password saving in vaults setting in the connection entry component in D…
    CVE-2026-0747 (CVSS 3.3) — Exposure of sensitive information in the TeamViewer entry dashboard component in Devolutions Remote Desktop Ma…
    CVE-2025-13683 (CVSS 6.5) — Exposure of credentials in unintended requests in Devolutions Server, Remote Desktop Manager on Windows.This i…
    CVE-2025-5334 (CVSS 7.5) — Exposure of private personal information to an unauthorized actor in the user vaults component of Devolutions …
    CVE-2025-2600 (CVSS 6.8) — Improper authorization in the variable component in Devolutions Remote Desktop Manager on Windows allows an au…
    CVE-2025-2562 (CVSS 5.4) — Insufficient logging in the autotyping feature in Devolutions Remote Desktop Manager on Windows allows an auth…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High