Search for vulnerabilities
| Vulnerability ID | VCID-14t8-vrru-aaaf |
| Aliases |
CVE-2006-2369
|
| Summary | RealVNC 4.1.1, and other products that use RealVNC such as AdderLink IP and Cisco CallManager, allows remote attackers to bypass authentication via a request in which the client specifies an insecure security type such as "Type 1 - None", which is accepted even if it is not offered by the server, as originally demonstrated using a long password. |
| Status | Published |
| Exploitability | 2.0 |
| Weighted Severity | 6.8 |
| Risk | 10.0 |
| Affected and Fixed Packages | Package Details |
| CWE-287 | Improper Authentication |
| Data source | Exploit-DB |
|---|---|
| Date added | May 13, 2012 |
| Description | RealVNC 4.1.0/4.1.1 - Authentication Bypass |
| Ransomware campaign use | Known |
| Source publication date | May 13, 2012 |
| Exploit type | remote |
| Platform | windows |
| Source update date | May 7, 2015 |
| Data source | Metasploit |
|---|---|
| Description | Detect VNC servers that support the "None" authentication method. |
| Note | {}
|
| Ransomware campaign use | Unknown |
| Source URL | https://github.com/rapid7/metasploit-framework/tree/master/modules/auxiliary/scanner/vnc/vnc_none_auth.rb |
| Exploitability (E) | Access Vector (AV) | Access Complexity (AC) | Authentication (Au) | Confidentiality Impact (C) | Integrity Impact (I) | Availability Impact (A) |
|---|---|---|---|---|---|---|
high functional unproven proof_of_concept not_defined |
local adjacent_network network |
high medium low |
multiple single none |
none partial complete |
none partial complete |
none partial complete |
| Percentile | 0.99557 |
| EPSS Score | 0.90206 |
| Published At | May 15, 2025, 12:55 p.m. |
| Date | Actor | Action | Source | VulnerableCode Version |
|---|---|---|---|---|
| There are no relevant records. | ||||