WID-SEC-W-2025-2510

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

AnyDesk: Mehrere Schwachstellen

view advisory published 2025-11-06

Ein entfernter anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in AnyDesk ausnutzen, um Dateien zu manipulieren, die Authentifizierung zu umgehen, einen Denial-of-Service-Zustand zu verursachen oder andere, nicht näher spezifizierte Angriffe durchzuführen.

01

describes (4)

Related CVEs.

IDseverity exploitable
CVE-2025-27919UShigh8.2—
An issue was discovered in AnyDesk through 9.0.4. A remotely connected user with the "Control my device" permission can manipulate remote AnyDesk settings and create a password for…
CVE-2025-27918UScritical9.8—
An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before 7.0.0, AnyDesk for iOS before 7.1.2, and AnyDesk for Android b…
CVE-2025-27917UShigh7.5—
An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before 7.0.0, AnyDesk for iOS before 7.1.2, and AnyDesk for Android b…
CVE-2025-27916UShigh7.5—
An issue was discovered in AnyDesk for Windows before 9.0.6 and AnyDesk for Android before 8.0.0. When the connection between two clients is established via an IP address, it is po…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan