Security Resilience

CVE-2023-2118

Devolutions Server ≤ 2023.1.6.0

Published
21 April 2023
Modified
04 February 2025
Patch / advisory
View advisory
CVSS Score v3.1 5.4
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
EPSS Score 0.0037 29th percentile
Risk Priority 44 floored blend · peak EPSS

CVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.

Summary

CVE-2023-2118 is a medium-severity an unspecified weakness vulnerability in Devolutions Devolutions Server. Its CVSS base score is 5.4 (Medium).

Operationally, ranked at the 29th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

Insufficient access control in support ticket feature in Devolutions Server 2023.1.5.0 and below allows an authenticated attacker to send support tickets and download diagnostic files via specific endpoints.

CWE(s)
NVD-CWE-noinfo

Related Threats

CVEs Like This One

CVE-2026-15637Same product: Devolutions Devolutions Server
CVE-2026-15641Same product: Devolutions Devolutions Server
CVE-2023-1603Same product: Devolutions Devolutions Server
CVE-2026-9249Same product: Devolutions Devolutions Server
CVE-2026-0610Same product: Devolutions Devolutions Server
CVE-2026-8407Same product: Devolutions Devolutions Server
CVE-2025-2003Same product: Devolutions Devolutions Server
CVE-2023-6264Same product: Devolutions Devolutions Server
CVE-2023-0951Same product: Devolutions Devolutions Server
CVE-2024-1898Same product: Devolutions Devolutions Server

Affected Assets

devolutions
devolutions server
≤ 2023.1.6.0

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References