{
  "cveId": "CVE-2024-6354",
  "url": "https://patchblox.com/security/cve/CVE-2024-6354",
  "summary": "CVE-2024-6354 is fixed in Remote Desktop Manager on 1 platform by Remote Desktop Manager 2024.2.12.0 (version 2024.2.12.0), released June 25, 2024. It is not reported as exploited. Patch Radar priority: High.",
  "title": "Remote Desktop Manager: Improper Access Control for Register Interface",
  "description": "Improper access control in PAM dashboard in Devolutions Remote Desktop Manager 2024.2.11 and earlier on Windows allows an authenticated user to bypass the execute permission via the use of the PAM dashboard.",
  "published": "2024-06-26T17:15:27Z",
  "severity": "",
  "cvss": 7.2,
  "cwe": "CWE-1262: Improper Access Control for Register Interface",
  "epss": 0.00786,
  "epssPercentile": 0.56369,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://nvd.nist.gov/vuln/detail/CVE-2024-6354",
  "fixes": [
    {
      "platform": "windows-app",
      "product": "Remote Desktop Manager",
      "fixedVersion": "2024.2.12.0",
      "fix": "Remote Desktop Manager 2024.2.12.0",
      "url": "https://patchblox.com/security/fix/windows-app/devolutions.remotedesktopmanager-2024.2.12.0",
      "released": "2024-06-25T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T07:25:28Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}