PT-2025-28506

CVE-2025-33054

Published

2025-07-08

Updated

2025-09-06

Description by

CVSS 2.0

9.4

High

MetricsAV:N/AC:L/Au:N/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions: Remote Desktop Client (affected versions not specified)

Description: The issue is related to insufficient UI warnings for dangerous operations in Remote Desktop Client, allowing an unauthorized attacker to perform spoofing over a network. This can lead to unauthorized actions being taken without the user's knowledge or consent.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Researchers

Gus Catalano

Josh Watson

Philemon Orphee Favrod

Ray Reskusich

Vendors

Affected products

Weakness enumeration

CWE-357: Insufficient UI Warning of Dangerous Operations

Related identifiers

CVE-2025-33054