Weak Credentials Vulnerability in Devolutions Server

CVE-2025-6523

What is CVE-2025-6523?

The vulnerability in Devolutions Server arises from the use of weak credentials in the emergency authentication component. This flaw enables unauthorized individuals to bypass security measures by brute forcing the short emergency codes generated by the server. The issue affects multiple versions of the software, emphasizing the need for users to review their configurations and strengthen their authentication protocols to mitigate potential security risks.

References