This vulnerability in AnyDesk allows a local attacker with low privileges to cause a denial-of-service by exploiting the Send Support Information feature. The attacker can create junctions that lead the service to create arbitrary files, disrupting normal operation. The vulnerability requires prior code execution at low privilege and does not affect confidentiality or integrity. Despite multiple attempts, the vendor did not provide a fix or detailed response, leading to a public advisory release by ZDI. No affected versions or patches are specified.

The impact is a denial-of-service condition on affected AnyDesk installations, potentially disrupting remote support functionality. There is no impact on confidentiality or integrity. Exploitation requires local access with low privileges, limiting the attack surface to users or processes already able to execute code on the system.

No official fix or patch is currently confirmed. The vendor has not provided remediation guidance. The primary mitigation is to restrict interaction with the AnyDesk product to trusted users and environments to prevent exploitation. Monitor vendor advisories for any future updates or patches.