CVE-2024-6354

—

CVSS 3.1

7.2 high

EPSS

<1%p54

Published

Jun 26, 2024 (Jun 26, 2024)

Modified

Jun 17, 2026

Description

Improper access control in PAM dashboard in Devolutions Remote Desktop Manager 2024.2.11 and earlier on Windows allows an authenticated user to bypass the execute permission via the use of the PAM dashboard.

Vendors: devolutions
Products: remote desktop manager
Weakness: CWE-1262
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.