CVE Daily

CVE-2025-6523

Use of weak credentials in emergency authentication component in Devolutions Ser...

High CVSS 7.7

Overview

Use of weak credentials in emergency authentication component in Devolutions Server allows an unauthenticated attacker to bypass authentication via brute forcing the short emergency codes generated by the server within a feasible timeframe.

This issue affects the following versions :

* Devolutions Server 2025.2.2.0 through 2025.2.3.0
*
Devolutions Server 2025.1.11.0 and earlier

CWE: CWE-1391 Published: 2025-07-22T17:15:33.900
Risk analysis

This vulnerability is rated 🟠 HIGH.

  • CVSS: 7.7 (HIGH)
  • Detected tags: unauth_access (tag impact: HIGH)

Recommended actions:

  • Enforce authentication/authorization; reduce default endpoint exposure.

Recommended tools

Tags