CVE-2024-52940

Description

AnyDesk through 8.1.0 on Windows, when Allow Direct Connections is enabled, inadvertently exposes a public IP address within network traffic. The attacker must know the victim's AnyDesk ID.

References

https://x.com/ProfShafiei/status/1850856458017009830

https://github.com/ebrasha/abdal-anydesk-remote-ip-detector

https://download.anydesk.com/changelog.txt

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3