Cisco Duo Authentication Windows Logon Rdp
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Cisco Duo Authentication Windows Logon Rdp.
By the Year
In 2026 there have been 0 vulnerabilities in Cisco Duo Authentication Windows Logon Rdp. Duo Authentication Windows Logon Rdp did not have any published security vulnerabilities last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 0 | 0.00 |
| 2025 | 0 | 0.00 |
| 2024 | 2 | 5.85 |
| 2023 | 1 | 4.60 |
| 2022 | 0 | 0.00 |
| 2021 | 0 | 0.00 |
| 2020 | 1 | 7.80 |
It may take a day or so for new Duo Authentication Windows Logon Rdp vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Cisco Duo Authentication Windows Logon Rdp Security Vulnerabilities
Cisco Duo Auth Windows Logon Bypass CVE-2024-20301
CVE-2024-20301
6.2 - Medium
- March 06, 2024
A vulnerability in Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, physical attacker to bypass secondary authentication and access an affected Windows device. This vulnerability is due to a failure to invalidate locally created trusted sessions after a reboot of the affected device. An attacker with primary user credentials could exploit this vulnerability by attempting to authenticate to an affected device. A successful exploit could allow the attacker to access the affected device without valid permissions.
Insufficient Session Expiration
Cisco Duo Windows: Unencrypted Reg Key in Logs
CVE-2024-20292
5.5 - Medium
- March 06, 2024
A vulnerability in the logging component of Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, local attacker to view sensitive information in clear text on an affected system. This vulnerability is due to improper storage of an unencrypted registry key in certain logs. An attacker could exploit this vulnerability by accessing the logs on an affected system. A successful exploit could allow the attacker to view sensitive information in clear text.
Cleartext Storage of Sensitive Information
Cisco Duo MFA Replay Vulnerability (CVE-2023-20123)
CVE-2023-20123
4.6 - Medium
- April 05, 2023
A vulnerability in the offline access mode of Cisco Duo Two-Factor Authentication for macOS and Duo Authentication for Windows Logon and RDP could allow an unauthenticated, physical attacker to replay valid user session credentials and gain unauthorized access to an affected macOS or Windows device. This vulnerability exists because session credentials do not properly expire. An attacker could exploit this vulnerability by replaying previously used multifactor authentication (MFA) codes to bypass MFA protection. A successful exploit could allow the attacker to gain unauthorized access to the affected device.
Authentication Bypass by Capture-replay
The Windows Logon installer prior to 4.1.2 did not properly validate file installation paths
CVE-2020-3427
7.8 - High
- October 14, 2020
The Windows Logon installer prior to 4.1.2 did not properly validate file installation paths. This allows an attacker with local user privileges to coerce the installer to write to arbitrary privileged directories. If successful, an attacker can manipulate files used by Windows Logon, cause Denial of Service (DoS) by deleting file(s), or replace system files to potentially achieve elevation of privileges. Note that this can only exploitable during new installations while the installer is running and is not exploitable once installation is finished. Versions 4.1.2 of Windows Logon addresses this issue.
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Cisco Duo Authentication Windows Logon Rdp or by Cisco? Click the Watch button to subscribe.
