Paper/Archive/CVE-2023-6593

CVE-2023-6593

Devolutions Remote Desktop Manager — Client side permission bypass in Devolutions Remote Desktop Manager 2023.3.4.0 and earlier on iOS allows an attacker that has access to t…

EPSS 0.7%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 54.1.541 × 2010.8 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Client side permission bypass in Devolutions Remote Desktop Manager 2023.3.4.0 and earlier on iOS allows an attacker that has access to the application to execute entries in a SQL data source without restriction.

Affected

ProductAffectedFixed inSource

Remote Desktop Manager≤ 2023.3.4.0–CNA

remote_desktop_manager≤ 2023.3.4.0–CISA-ADP

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refdevolutions.net/security/advisories/DEVO-2023-0023