VULNERABILITY INTELLIGENCE

CVE-2025-3768

CVSS score5 MEDIUM
EPSS probability0.27%
CISA KEVNot currently listed
Published2025-06-05
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

Description

Improper access control in Tor network blocking feature in Devolutions Server 2025.1.10.0 and earlier allows an authenticated user to bypass the tor blocking feature when the Devolutions hosted endpoint is not reachable.

Weakness classification

  • security@devolutions.net: CWE-284
  • nvd@nist.gov: NVD-CWE-noinfo

Primary references