CVE-2025-6523 Hardcoded credentials in Server
Unauthenticated attackers can bypass authentication in Devolutions Server by brute-forcing weak emergency codes, leading to account takeover.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-6523?
CVE-2025-6523 is a critical vulnerability in Devolutions Devolutions Server, published on 22 Jul 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Use of weak credentials in emergency authentication component in Devolutions Server allows an unauthenticated attacker to bypass authentication via brute forcing the short emergency codes generated by the server within a feasible timeframe.
This issue affects the following versions :
* Devolutions Server 2025.2.2.0 through 2025.2.3.0 * Devolutions Server 2025.1.11.0 and earlier
Weakness: CWE-1391
Which versions are affected by CVE-2025-6523?
It affects 1 product.
Products include Devolutions Devolutions Server.
How do I fix CVE-2025-6523?
No fix has been published for CVE-2025-6523 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-6523 being exploited?
There is no known exploitation of CVE-2025-6523 in the wild and no public exploit code.
Other vulnerabilities in Devolutions Devolutions Server
Sources
Also known as GHSA-qmwg-p2m2-4r2x.