CVE-2023-5766 Command injection in Remote Desktop Manager

High 8.8 Published 1 Nov 2023 Updated 6 Sep 2024

Attackers can execute arbitrary code on Windows hosts via crafted TCP packets in Remote Desktop Manager, requiring immediate patching.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2023-5766?

CVE-2023-5766 is a high-severity command injection vulnerability in Devolutions Remote Desktop Manager, published on 1 Nov 2023. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

A remote code execution vulnerability in Remote Desktop Manager 2023.2.33 and earlier on Windows allows an attacker to remotely execute code from another windows user session on the same host via a specially crafted TCP packet.

Which versions are affected by CVE-2023-5766?

It affects 1 product.

Products include Devolutions Remote Desktop Manager.

How do I fix CVE-2023-5766?

No fix has been published for CVE-2023-5766 yet. Limit exposure of the affected software until one is available.

Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.

Is CVE-2023-5766 being exploited?

There is no known exploitation of CVE-2023-5766 in the wild and no public exploit code.

All Devolutions Remote Desktop Manager vulnerabilities

Sources

Also known as GHSA-wjmw-g7qq-g6h2.