CVE-2024-52940
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Nov 18, 2024
CWE ID 532
Summary
CVE-2024-52940 is a newly disclosed vulnerability affecting AnyDesk on Windows systems. This issue allows an attacker, who is already aware of the victim's AnyDesk ID, to inadvertently expose the victim's public IP address through network traffic. When the "Allow Direct Connections" setting is enabled, the vulnerable version of AnyDesk (8.1.0 and below) sends this IP address in plaintext during data transfer, putting users at risk of unauthorized access and potential cyberattacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- AnyDesk
Affected Vendors
- AnyDesk Software GmbH