CVE-2023-5766

2023-11-0117:08:03

DEVOLUTIONS

github.com

remote desktop manager

rce

vulnerability

windows

tcp packet

code execution

host

AI Score

9.9

Confidence

High

EPSS

0.003

Percentile

68.3%

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

A remote code execution vulnerability in Remote Desktop Manager 2023.2.33 and earlier on Windows allows an attacker to remotely execute code from another windows user session on the same host via a specially crafted TCP packet.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:devolutions:remote_desktop_manager:*:*:*:*:*:*:*:*"
    ],
    "vendor": "devolutions",
    "product": "remote_desktop_manager",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "2023.2.33"
      }
    ],
    "defaultStatus": "unaffected"
  }
]