{"cve":{"cve_id":"CVE-2024-11621","is_kev":false,"kev_date_added":null,"kev_vendor_project":null,"kev_product":null,"kev_vulnerability_name":null,"kev_short_description":null,"kev_required_action":null,"kev_due_date":null,"kev_known_ransomware":null,"kev_notes":null,"kev_cwes":null,"epss_score":0.00217,"epss_percentile":0.11952,"epss_as_of":"2026-06-23","description":"Missing certificate validation in Devolutions Remote Desktop Manager on macOS, iOS, Android, Linux allows an attacker to intercept and modify encrypted communications via a man-in-the-middle attack.\n\nVersions affected are :\nRemote Desktop Manager macOS 2024.3.9.0 and earlier\nRemote Desktop Manager Linux 2024.3.2.5 and earlier\nRemote Desktop Manager Android  2024.3.3.7 and earlier\nRemote Desktop Manager iOS 2024.3.3.0 and earlier\n\nRemote Desktop Manager Powershell 2024.3.6.0 and earlier","published_at":"2025-02-10T13:55:29.155000Z","last_modified_at":null,"cvss_v3_score":8.8,"cvss_v3_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_v3_severity":"HIGH","cvss_v4_score":null,"cvss_v4_vector":null,"cvss_v4_severity":null,"ssvc_decision":null,"ssvc_exploitation":"none","ssvc_automatable":false,"ssvc_technical_impact":"total","cwes":["CWE-295"],"nvd_references":["https://devolutions.net/security/advisories/DEVO-2025-0001/"],"vuln_status":null,"trending_score":null,"is_trending":false,"has_trended":false,"trended_number_one":false,"trending_peak_score":null,"trending_peak_rank":null,"started_trending_at":null,"trended_number_one_at":null,"summary_generated":null,"summary_generated_at":null,"summary_model":null,"created_at":"2026-06-24T00:09:39.878444Z","updated_at":"2026-06-29T01:49:24.977771Z"},"effective_severity":"HIGH","badges":[],"impact_analysis":[],"cvss_v3_decoded":{"version":"3.1","metrics":[{"metric":"AV","name":"Attack Vector","value":"N","value_label":"Network"},{"metric":"AC","name":"Attack Complexity","value":"L","value_label":"Low"},{"metric":"PR","name":"Privileges Required","value":"N","value_label":"None"},{"metric":"UI","name":"User Interaction","value":"R","value_label":"Required"},{"metric":"S","name":"Scope","value":"U","value_label":"Unchanged"},{"metric":"C","name":"Confidentiality","value":"H","value_label":"High"},{"metric":"I","name":"Integrity","value":"H","value_label":"High"},{"metric":"A","name":"Availability","value":"H","value_label":"High"}]},"cvss_v4_decoded":{"version":null,"metrics":[]},"affected":[{"vendor_slug":"devolutions","vendor_name":"Devolutions","product_slug":"remote-desktop-manager","product_name":"Remote Desktop Manager","version_start":"0","version_start_inclusive":true,"version_end":"2024.3.9.0","version_end_inclusive":true,"cpe23_uri":"cve5:devolutions:remote-desktop-manager:0:2024.3.9.0"},{"vendor_slug":"devolutions","vendor_name":"Devolutions","product_slug":"remote-desktop-manager","product_name":"Remote Desktop Manager","version_start":"0","version_start_inclusive":true,"version_end":"2024.3.2.5","version_end_inclusive":true,"cpe23_uri":"cve5:devolutions:remote-desktop-manager:0:2024.3.2.5"},{"vendor_slug":"devolutions","vendor_name":"Devolutions","product_slug":"remote-desktop-manager","product_name":"Remote Desktop Manager","version_start":"0","version_start_inclusive":true,"version_end":"2024.3.3.7","version_end_inclusive":true,"cpe23_uri":"cve5:devolutions:remote-desktop-manager:0:2024.3.3.7"},{"vendor_slug":"devolutions","vendor_name":"Devolutions","product_slug":"remote-desktop-manager","product_name":"Remote Desktop Manager","version_start":"0","version_start_inclusive":true,"version_end":"2024.3.3.0","version_end_inclusive":true,"cpe23_uri":"cve5:devolutions:remote-desktop-manager:0:2024.3.3.0"},{"vendor_slug":"devolutions","vendor_name":"Devolutions","product_slug":"remote-desktop-manager","product_name":"Remote Desktop Manager","version_start":"0","version_start_inclusive":true,"version_end":"2024.3.6.0","version_end_inclusive":true,"cpe23_uri":"cve5:devolutions:remote-desktop-manager:0:2024.3.6.0"}],"exploit_refs":[],"news":[],"references":[{"url":"https://devolutions.net/security/advisories/DEVO-2025-0001/","source_type":"VENDOR_ADVISORY","tags":["advisory"]}],"timeline":[{"type":"published","at":"2025-02-10T13:55:29.155000Z","label":"CVE published","source":null},{"type":"cvss_changed","at":"2026-06-28T17:32:29.086311Z","label":"CVSS score revised","source":"cvelistv5"},{"type":"cvss_changed","at":"2026-06-28T17:32:29.086311Z","label":"CVSS score revised","source":"cvelistv5"},{"type":"cvss_changed","at":"2026-06-28T17:32:29.086311Z","label":"CVSS score revised","source":"cvelistv5"},{"type":"ssvc_changed","at":"2026-06-29T01:49:24.977771Z","label":"SSVC decision revised","source":"vulnrichment"},{"type":"ssvc_changed","at":"2026-06-29T01:49:24.977771Z","label":"SSVC decision revised","source":"vulnrichment"},{"type":"ssvc_changed","at":"2026-06-29T01:49:24.977771Z","label":"SSVC decision revised","source":"vulnrichment"}]}