CVE-2023-45894

Name of the Vulnerable Software and Affected Versions Parallels RAS versions prior to 19.2.23975

Description The issue allows a remote attacker to achieve remote code execution via standard kiosk breakout techniques because the Remote Application Server in Parallels RAS does not segment virtualized applications from the server.

Recommendations For versions prior to 19.2.23975, update to version 19.2.23975 or later to resolve the issue. As a temporary workaround, consider restricting access to the Remote Application Server to minimize the risk of exploitation.