ZDI-CAN-26645 MEDIUM 4.7 Overdue Mar 30, 2025

AnyDesk

AnyDesk is a popular remote desktop software platform used for IT support and remote access. This medium-severity vulnerability requires local access with low privileges to exploit and can cause a denial of service, but cannot be remotely triggered or used to steal data. Security teams should monitor for patches when the vendor deadline passes on July 28, 2025, and restrict local access privileges on systems running AnyDesk in sensitive environments.

Advisory Details
Researcher Discovered by: Giuliano Sanfins from SiDi (0x_alibabas)
Reported March 30, 2025
Deadline July 28, 2025 262d overdue
CVSS Vector AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy