Weak Credentials Vulnerability in Devolutions Server
CVE-2025-6523

9.5CRITICAL

Key Information:

Vendor

Devolutions

Status
Server
Vendor
CVE Published:
22 July 2025

What is CVE-2025-6523?

The vulnerability in Devolutions Server arises from the use of weak credentials in the emergency authentication component. This flaw enables unauthorized individuals to bypass security measures by brute forcing the short emergency codes generated by the server. The issue affects multiple versions of the software, emphasizing the need for users to review their configurations and strengthen their authentication protocols to mitigate potential security risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Server 0 <= 2025.1.11.0

Server 2025.2.2.0 <= 2025.2.3.0

References

https://devolutions.net/security/advisories/DEVO-2025-0012/

CVSS V4

Score:
9.5
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.