CVE-2021-42098

—

CVSS 3.1

8.8 high

EPSS

2%p74

Published

Oct 18, 2021 (Oct 18, 2021)

Modified

Jun 17, 2026

Description

An incomplete permission check on entries in Devolutions Remote Desktop Manager before 2021.2.16 allows attackers to bypass permissions via batch custom PowerShell.

Vendors: devolutions
Products: remote desktop manager
Weakness: CWE-276
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.6%)

In the news0 stories

No ingested article mentions this CVE yet.