Remote Desktop Manager Vulnerabilities Let Attackers Intercept Encrypted Communications
\n \t
\n
<\/BR>
\n
\n \t
\n
<\/BR><\/p>\n
Devolutions have disclosed critical vulnerabilities in its Remote Desktop Manager (RDM)<\/a> software, which could allow attackers to intercept and modify encrypted communications through man-in-the-middle (MITM) attacks.\u00a0<\/p>\n These flaws stem from improper certificate validation across all platforms and have been assigned high-severity CVE identifiers.<\/p>\n CVE-2025-1193 has been assigned to this vulnerability, with a CVSS score of 8.5 (High). In RDM versions 2024.3.19 and earlier for Windows, the certificate validation logic failed to properly validate the host.\u00a0<\/p>\n The vulnerability in Windows arises from insufficient checks in the certificate validation logic within RDM\u2019s host verification process.<\/p>\n Attackers can exploit this flaw by presenting a spoofed certificate for an unrelated host. This allows the interception of sensitive data during encrypted communication.<\/p>\n The attack vector is network-based, requiring no privileges or user interaction.<\/p>\n This vulnerability is tracked as CVE-2024-11621, with a CVSS score of 8.6 (High). On macOS<\/a>, Linux<\/a>, Android<\/a>, iOS<\/a>, and PowerShell versions of RDM, certificate validation was entirely absent.\u00a0<\/p>\n This means any certificate presented during a connection would be accepted without user notification.<\/p>\n The complete absence of certificate validation creates a critical security gap where any malicious certificate is automatically trusted by the application.\u00a0<\/p>\n This enables attackers to use Man-in-the-Middle (MITM) attacks<\/a> to intercept encrypted conversations.<\/p>\n Affected Products and Versions<\/strong><\/p>\nCVE-2025-1193 Improper Host Validation<\/strong><\/h2>\n
CVE-2024-11621 Missing Certificate Validation<\/strong><\/h2>\n