CVE-2023-7047

—

CVSS 3.1

4.4 medium

EPSS

<1%p6

Published

Dec 21, 2023 (Dec 21, 2023)

Modified

Jun 17, 2026

Description

Inadequate validation of permissions when employing remote tools and macros via the context menu within Devolutions Remote Desktop Manager versions 2023.3.31 and earlier permits a user to initiate a connection without proper execution rights via the remote tools feature. This affects only SQL data sources.

Vendors: devolutions
Products: remote desktop manager
Weakness: CWE-863
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.