Security Advisory

CVE-2021-44426

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-09-12 20:47:33

Last updated 2024-08-04 04:25:16

Assigner mitre

State PUBLISHED

Description

An issue was discovered in AnyDesk before 6.2.6 and 6.3.x before 6.3.5. An upload of an arbitrary file to a victims local ~/Downloads/ directory is possible if the victim is using the AnyDesk Windows client to connect to a remote machine, if an attacker is also connected remotely with AnyDesk to the same remote machine. The upload is done without any approval or action taken by the victim.

← Browse all CVEs View on cve.org ↗