What is CVE-2024-3545?

CVE-2024-3545 is a medium-severity vulnerability in Devolutions Devolutions_server, classified under Improper Preservation of Permissions. CVSS score: 4.3/10. Published 2024-04-09.

How severe is CVE-2024-3545?

Medium severity. CVSS v3 base score is 4.3 out of 10.

Is CVE-2024-3545 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Devolutions Devolutions_server

CVE-2024-3545

Improper permission handling in the vault offline cache feature in Devolutions Remote Desktop Manager 2024.1.20 and earlier on windows and Devolutions Server 2024.1.8 and earlier allows an attacker to access sensitive informations containe…

EPSS: 0.003 (19.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L.

Affected products

Devolutions Devolutions_server
Devolutions Remote Desktop Manager — versions 0
Devolutions Remote_desktop_manager
Devolutions Server — versions 0

Weakness classification (CWE)

CWE-281 — Improper Preservation of Permissions

Public proof-of-concept exploits

fkie-cad/nvd-json-data-feeds

References

security@devolutions.net (Vendor Advisory)

Frequently asked questions

What is CVE-2024-3545?: CVE-2024-3545 is a medium-severity vulnerability in Devolutions Devolutions_server, classified under Improper Preservation of Permissions. CVSS score: 4.3/10. Published 2024-04-09.
How severe is CVE-2024-3545?: Medium severity. CVSS v3 base score is 4.3 out of 10.
Is CVE-2024-3545 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.