Vulnerability · Published Sep 13, 2022 · Assigned by DEVOLUTIONS
CVE-2022-3182
High 7.0
In plain English
A high-severity improper access control in Remote Desktop Manager from Devolutions. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 5% of all known vulnerabilities).
Severity (CVSS NVD)7.0High
Exploit odds (30 days)0.2%top 94.7% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Improper Access Control vulnerability in the Duo SMS two-factor of Devolutions Remote Desktop Manager 2022.2.14 and earlier allows attackers to bypass the application lock. This issue affects: Devolutions Remote Desktop Manager version 2022.2.14 and prior versions.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Devolutions | Remote Desktop Manager | unspecified – through 2022.2.14 |
Weakness: CWE-284
References
- https://devolutions.net/security/advisories/DEVO-2022-0007 x_refsource_MISC