CVE-2024-52940

{
  "id": "CVE-2024-52940",
  "sourceIdentifier": "[email protected]",
  "published": "2024-11-18T05:15:05.200",
  "lastModified": "2026-11-03T22:17:26.873",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "AnyDesk through 8.1.0 on Windows, when Allow Direct Connections is enabled, inadvertently exposes a public IP address within network traffic. The attacker must know the victim's AnyDesk ID."
    },
    {
      "lang": "es",
      "value": "AnyDesk hasta la versión 8.1.0 en Windows, cuando está habilitada la opción Permitir conexiones directas, expone inadvertidamente una dirección IP pública dentro del tráfico de la red. El atacante debe conocer el ID de AnyDesk de la víctima."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "version": "n/a",
              "status": "affected"
            }
          ]
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "vendor": "anydesk",
          "product": "anydesk",
          "defaultStatus": "unknown",
          "cpes": [
            "cpe:2.3:a:anydesk:anydesk:-:*:*:*:*:windows:*:*"
          ],
          "versions": [
            {
              "version": "0",
              "lessThanOrEqual": "8.1.0",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2024-11-23T04:55:42.844316Z",
          "id": "CVE-2024-52940",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-532"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://download.anydesk.com/changelog.txt",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/ebrasha/abdal-anydesk-remote-ip-detector",
      "source": "[email protected]"
    },
    {
      "url": "https://x.com/ProfShafiei/status/1850856458017009830",
      "source": "[email protected]"
    }
  ]
}