Vulnerability · Published Oct 18, 2021 · Assigned by DEVOLUTIONS
CVE-2021-42098
High 8.8
In plain English
A high-severity security flaw in Remote Desktop Manager from Devolutions. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.8% (higher than 78% of all known vulnerabilities).
Severity (CVSS NVD)8.8High
Exploit odds (30 days)1.8%top 21.9% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
An incomplete permission check on entries in Devolutions Remote Desktop Manager before 2021.2.16 allows attackers to bypass permissions via batch custom PowerShell.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Devolutions | Remote Desktop Manager | 2021.2.14 and earlier. Fixed in 2021.2.16. |
References
- https://devolutions.net x_refsource_MISC
- https://devolutions.net/security/advisories/DEVO-2021-0006 x_refsource_CONFIRM