Security Resilience

CVE-2023-1201

Devolutions Server ≤ 2022.3.13

Published
10 March 2023
Modified
21 November 2024
Patch / advisory
View advisory
CVSS Score v3.1 6.5
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS Score 0.0081 56th percentile
Risk Priority 52 floored blend · peak EPSS

CVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.

Summary

CVE-2023-1201 is a medium-severity an unspecified weakness vulnerability in Devolutions Devolutions Server. Its CVSS base score is 6.5 (Medium).

Operationally, ranked in the top 44% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

Improper access control in the secure messages feature in Devolutions Server 2022.3.12 and below allows an authenticated attacker that possesses the message UUID to access the data it contains.

CWE(s)
NVD-CWE-Other

Related Threats

CVEs Like This One

CVE-2026-15637Same product: Devolutions Devolutions Server
CVE-2026-15641Same product: Devolutions Devolutions Server
CVE-2023-1603Same product: Devolutions Devolutions Server
CVE-2026-9249Same product: Devolutions Devolutions Server
CVE-2026-0610Same product: Devolutions Devolutions Server
CVE-2026-8407Same product: Devolutions Devolutions Server
CVE-2025-2003Same product: Devolutions Devolutions Server
CVE-2023-6264Same product: Devolutions Devolutions Server
CVE-2023-0951Same product: Devolutions Devolutions Server
CVE-2024-1898Same product: Devolutions Devolutions Server

Affected Assets

devolutions
devolutions server
≤ 2022.3.13

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References