Devolutions Remote Desktop Manager Windows Improper Host Validation Vulnerability Allowing Man-in-the-Middle Attacks

A vulnerability exists in Devolutions Remote Desktop Manager for Windows, specifically in versions through 2024.3.19, due to improper host validation in the certificate validation component. This flaw allows attackers to intercept and modify encrypted communications by presenting a certificate for a different host, effectively executing a man-in-the-middle attack.

Impact

Exploitation of this vulnerability allows for interception and modification of encrypted communications, creating a man-in-the-middle attack scenario.

Remediation

Users can upgrade to Devolutions Remote Desktop Manager for Windows version 2024.3.20.0 or higher to address this vulnerability.