CVE-2023-4373

—

CVSS 3.1

9.8 critical

EPSS

<1%p52

Published

Aug 21, 2023 (Aug 21, 2023)

Modified

Jun 17, 2026

Description

Inadequate validation of permissions when employing remote tools and macros within Devolutions Remote Desktop Manager versions 2023.2.19 and earlier permits a user to initiate a connection without proper execution rights via the remote tools feature.

Vendors: devolutions
Products: remote desktop manager
Weakness: CWE-287
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.