CVE-2022-25226

 

Published at: - 18-04-2022 07:15

Last modified: - 25-04-2022 06:17

Total changes: - 2

Description

ThinVNC version 1.0b1 allows an unauthenticated user to bypass the authentication process via 'http://thin-vnc:8080/cmd?cmd=connect' by obtaining a valid SID without any kind of authentication. It is possible to achieve code execution on the server by sending keyboard or mouse events to the server.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

 

Verification logic

 

Reference

• https://fluidattacks.com/advisories/sinatra/

 

Keywords

NVD

 

CVE-2022-25226

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures