Devolutions Remote Desktop Manager

Name: Devolutions Remote Desktop Manager
Brand: Devolutions

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

4critical6high13medium1low

updated 2026-10-28

vulnerabilities (51)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-42098US	high8.8OT elevated	1.76% (78th)	—	no fix	2021-10-18	≤ 2021.2.14 and earlier. Fixed in 2021.2.16.
CVE-2025-1636US	—	1.76% (78th)	—	2025.1.3	2025-03-13	3 versions
CVE-2025-1635US	—	1.76% (78th)	—	2025.1.24	2025-03-13	3 versions
CVE-2022-2221US	medium6.5	1.34% (71st)	—	2022.1.8	2022-06-27	2022.1.8 → 2022.1.8
CVE-2022-4287US	high8.8OT elevated	1.09% (65th)	—	no fix	2022-12-21	≤ 0 ≤2022.3.27
CVE-2024-6057US	—	0.92% (60th)	—	no fix	2024-06-17	≤ 0 ≤2024.1.31.0
CVE-2024-6354US	—	0.79% (56th)	—	no fix	2024-06-26	≤ 0 ≤2024.2.11
CVE-2023-6593US	critical9.8	0.73% (54th)	—	no fix	2023-12-12	≤ 0 ≤2023.3.4.0
CVE-2023-4373US	critical9.8	0.72% (54th)	—	no fix	2023-08-21	≤ 0 ≤2023.2.19
CVE-2024-11670US	—OT elevated	0.67% (52nd)	—	no fix	2024-11-25	≤ 0 ≤2024.2.21.0
CVE-2023-5765US	critical9.8	0.61% (49th)	—	no fix	2023-11-01	≤ 0 ≤2023.2.33
CVE-2024-12149US	—	0.60% (49th)	—	no fix	2024-12-04	≤ 0 ≤2024.3.19.0
CVE-2024-6492US	—	0.60% (48th)	—	no fix	2024-07-16	≤ 0 ≤2024.2.14.0
CVE-2025-5334US	—	0.59% (48th)	—	2025.1.37.0	2025-05-29	5 versions
CVE-2022-3641US	high8.8	0.59% (48th)	—	no fix	2022-12-12	≤ 2022.3.13 ≤2022.3.24
CVE-2022-3780US	high7.5	0.59% (48th)	—	no fix	2022-11-01	≤ 0 ≤2022.3.7
CVE-2023-5766US	critical9.8	0.58% (48th)	—	no fix	2023-11-01	≤ 0 ≤2023.2.33
CVE-2025-2277US	—	0.56% (46th)	—	2025.1.3	2025-03-13	< 2025.1.3
CVE-2024-11672US	—OT elevated	0.55% (46th)	—	no fix	2024-11-25	≤ 0 ≤2024.2.21.0
CVE-2023-4417US	medium6.5	0.54% (45th)	—	no fix	2023-08-21	≤ 0 ≤2023.2.19
CVE-2024-11671US	—	0.53% (44th)	—	no fix	2024-11-25	≤ 0 ≤2024.3.17
CVE-2023-1980US	medium6.5	0.52% (44th)	—	no fix	2023-04-11	≤ 0 ≤2022.3.35.0
CVE-2025-2280US	—	0.51% (43rd)	—	2025.1.3	2025-03-13	< 2025.1.3
CVE-2026-13372US	—	0.50% (43rd)	—	2026.2.12.0	2026-06-26	2 versions
CVE-2024-6055US	—	0.50% (42nd)	—	no fix	2024-06-17	≤ 0 ≤2024.1.32.0
CVE-2023-1574US	medium6.5	0.48% (41st)	—	no fix	2023-04-02	≤ 0 ≤2023.1.9
CVE-2022-3781US	medium6.5OT elevated	0.48% (41st)	—	no fix	2022-11-01	≤ 0 ≤2022.2.26
CVE-2025-2278US	—	0.46% (39th)	—	2025.1.3	2025-03-13	< 2025.1.3
CVE-2023-1202US	medium6.5OT elevated	0.44% (38th)	—	no fix	2023-04-02	≤ 0 ≤2023.1.9
CVE-2026-12161US	—	0.44% (38th)	—	2026.2.8.0	2026-06-16	3 versions
CVE-2026-2590US	—	0.44% (38th)	—	2026.1	2026-03-03	2 versions
CVE-2025-2562US	—	0.43% (37th)	—	2025.1.26	2025-03-26	4 versions
CVE-2023-2282US	medium6.5	0.42% (36th)	—	no fix	2023-04-25	≤ 0 ≤2023.1.22
CVE-2024-2403US	medium5.9	0.42% (36th)	—	no fix	2024-03-13	2 versions
CVE-2025-2600US	—	0.41% (36th)	—	2025.1.26	2025-03-26	4 versions
CVE-2025-2499US	—	0.41% (35th)	—	2024.3.31	2025-03-26	4 versions
CVE-2023-1939US	medium4.3	0.40% (35th)	—	2022.3.2.1	2023-04-11	2 versions
CVE-2025-1193US	—	0.39% (33rd)	—	no fix	2025-02-10	≤ 0 ≤2024.3.19
CVE-2025-13683US	—	0.39% (33rd)	—	2025.3.10.0	2025-11-28	2 versions
CVE-2022-1342US	medium4.6	0.38% (32nd)	—	no fix	2022-06-15	≤ unspecified ≤2022.1.24
CVE-2023-6288US	high7.8	0.31% (24th)	—	no fix	2023-12-06	≤ 0 ≤2023.3.9.3
CVE-2024-0589US	medium5.4	0.29% (22nd)	—	no fix	2024-01-31	2 versions
CVE-2024-3545US	—	0.28% (20th)	—	no fix	2024-04-09	≤ 0 ≤2024.1.20.0
CVE-2024-11621US	—	0.23% (14th)	—	no fix	2025-02-10	5 versions
CVE-2023-0463US	low3.3OT elevated	0.23% (13th)	—	no fix	2023-01-26	≤ 2022.3.29 ≤2022.3.30
CVE-2026-0747US	—	0.20% (10th)	—	2025.3.29.0	2026-01-08	2 versions
CVE-2025-2528US	—	0.17% (7th)	—	2024.3.31	2025-03-26	4 versions
CVE-2023-7047US	medium4.4OT elevated	0.17% (6th)	—	no fix	2023-12-21	2 versions
CVE-2022-3182US	high7.0	0.16% (5th)	—	no fix	2022-09-13	≤ unspecified ≤2022.2.14
CVE-2024-7421US	medium5.5	0.15% (4th)	—	no fix	2024-09-25	2 versions

showing 50 of 51

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-200Exposure of Sensitive Information to an Unauthorized Actor7 CVEs
CWE-522Insufficiently Protected Credentials6 CVEs
CWE-284Improper Access Control5 CVEs
CWE-287Improper Authentication4 CVEs
CWE-863Incorrect Authorization4 CVEs
CWE-295Improper Certificate Validation3 CVEs
CWE-732Incorrect Permission Assignment for Critical Resource3 CVEs
CWE-20Improper Input Validation2 CVEs

sources (3)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)48 CVEs
DECERT-Bund (BSI CSAF)16 CVEs
RUBDU (FSTEC Data Security Threats Database)1 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan