PatchTheCVECVE-2024-11621: Missing certificate validation in Devolutions Remote Desktop Manager on macOS, iOS, Android, Linux allows an a
CVE-2024-11621 is a high-severity flaw (CVSS 8.8) affecting remote desktop manager, remote desktop manager, remote desktop manager. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Missing certificate validation in Devolutions Remote Desktop Manager on macOS, iOS, Android, Linux allows an attacker to intercept and modify encrypted communications via a man-in-the-middle attack. Versions affected are : Remote Desktop Manager macOS 2024.3.9.0 and earlier Remote Desktop Manager Linux 2024.3.2.5 and earlier Remote Desktop Manager Android 2024.3.3.7 and earlier Remote Desktop Manager iOS 2024.3.3.0 and earlier Remote Desktop M
Why this priority
- High severity
- On your watchlist
A fixed release or distro patch exists.
Risk facts
| CVSS score | 8.8 (High) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | Required |
| EPSS exploit chance | 0.2% (top 86%) |
| CISA exploited list | No |
| Weakness | CWE-295 |
| Published | 2025-02-10 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2024-11621?
remote desktop manager: upgrade to 2024.3.2.9; remote desktop manager: upgrade to 2024.3.4.0; remote desktop manager: upgrade to 2024.3.4.2. Exact commands for each OS are on this page.
Is CVE-2024-11621 being exploited?
CVE-2024-11621 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2024-11621 affect?
CVE-2024-11621 affects remote desktop manager, remote desktop manager, remote desktop manager. Severity is high (CVSS 8.8). Missing certificate validation in Devolutions Remote Desktop Manager on macOS, iOS, Android, Linux allows an attacker to intercept and modify encrypted communications via a man-in-the-middle attack. Versions affected are : Remote Desktop M
How urgent is CVE-2024-11621?
Priority 39/100. High severity; On your watchlist
Software pages
Android vulnerabilities · iOS vulnerabilities · macOS vulnerabilities · PowerShell vulnerabilities · WinRM and RDP vulnerabilities
Related CVEs
- CVE-2026-0747 LOW 3.3 UPGRADE Exposure of sensitive information in the TeamViewer entry dashboard component in Devolutions Remote Desktop Ma
- CVE-2026-12161 HIGH 8.8 UPGRADE Improper input validation in the SSH Elevate Shell feature allows an authenticated user with permission to cr
- CVE-2026-12162 MEDIUM 5.5 UPGRADE Improper host validation in the social login autofill feature in Devolutions Remote Desktop Manager 2026.2.8
- CVE-2026-13372 HIGH 7.2 UPGRADE Incorrect link resolution by display name in the custom PowerShell VPN editor in Devolutions Remote Desktop Ma
- CVE-2025-13683 MEDIUM 6.5 UPGRADE UPGRADE Exposure of credentials in unintended requests in Devolutions Server, Remote Desktop Manager on Windows.This i