What’s Vulnerable › Vulnerabilities

CVE-2022-25031

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-03-03 · updated 2026-06-17
• Weakness: CWE-428

Description

Remote Desktop Commander Suite Agent before v4.8 contains an unquoted service path which allows attackers to escalate privileges to the system level.

Affected products

• Rdpsoft Remote Desktop Commander Suite Agent: before 4.8 — fixed in 4.8

How to fix

Upgrade to a fixed version: Rdpsoft Remote Desktop Commander Suite Agent 4.8. Check the vendor advisory for mitigations.

References

• https://hansesecure.de/2022/02/vulnerability-in-remote-desktop-commander-suite-agent/?lang=en
• https://www.rdpsoft.com/uqspvuln/
• https://hansesecure.de/2022/02/vulnerability-in-remote-desktop-commander-suite-agent/?lang=en
• https://www.rdpsoft.com/uqspvuln/

Get alerted when CVE-2022-25031 or the next vulnerability affects your stack