We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2025-2562



Description

Insufficient logging in the autotyping feature in Devolutions Remote Desktop Manager on Windows allows an authenticated user to use a stored password without generating a corresponding log event, via the use of the autotyping functionality. This issue affects Remote Desktop Manager versions from 2025.1.24 through 2025.1.25, and all versions up to 2024.3.29.

Reserved 2025-03-20 | Published 2025-03-26 | Updated 2025-03-26 | Assigner DEVOLUTIONS

Problem types

CWE-778: Insufficient Logging

Product status

Default status
unaffected

2025.1.24
affected

Any version
affected

References

devolutions.net/security/advisories/DEVO-2025-0005/

cve.org (CVE-2025-2562)

nvd.nist.gov (CVE-2025-2562)

Download JSON

Share this page
https://cve.threatint.eu/CVE/CVE-2025-2562

Support options

Helpdesk Chat, Email, Knowledgebase