{"id":"CVE-2024-52940","title":"AnyDesk through 8.1.0 on Windows, when Allow Direct Connections is enabled, inadvertently exposes a public IP address within network traffic","summary":"AnyDesk through 8.1.0 on Windows, when Allow Direct Connections is enabled, inadvertently exposes a public IP address within network traffic. The attacker must know the victim's AnyDesk ID.","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvssSource":"adp","ssvc":{"exploitation":"poc","automatable":"yes","technicalImpact":"partial","timestamp":"2026-11-04T16:47:29.975959Z"},"exploitAvailable":true,"published":"2024-11-18","updated":"2026-11-04","sourceUpdated":"2026-11-04T16:47:38.709Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-52940","references":[{"url":"https://download.anydesk.com/changelog.txt"},{"url":"https://github.com/ebrasha/abdal-anydesk-remote-ip-detector"},{"url":"https://x.com/ProfShafiei/status/1850856458017009830"}],"tags":["cve.org","exploit-available"],"epss":0.01256,"epssPercentile":0.69722,"exploits":{"github":1,"githubRepos":["https://github.com/MKultra6969/AnySniff"],"checkedAt":"2026-11-09T19:55:18.188Z"},"ingestedAt":"2026-11-05T21:36:00.457Z","slug":"CVE-2024-52940","body":"## Overview\n\nAnyDesk through 8.1.0 on Windows, when Allow Direct Connections is enabled, inadvertently exposes a public IP address within network traffic. The attacker must know the victim's AnyDesk ID.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":54,"depthScoreParts":{"impact":41.3,"likelihood":0.3,"exploitation":12,"ransomware":0},"changes":[]}