by Kastro
Paper/Archive/CVE-2022-25226

CVE-2022-25226

Fluid Attacks — ThinVNC version 1.0b1 allows an unauthenticated user to bypass the authentication process via 'http://thin-vnc:8080/cmd?cmd=connect' by o…

EPSS 11%CVSS 10.0
critical.is priorityof 100
49
CVSS 10.0 (NVD)10.0 / 10 × 3030.0Not in CISA KEV+300.0EPSS percentile 95.9.959 × 2019.2No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

ThinVNC version 1.0b1 allows an unauthenticated user to bypass the authentication process via 'http://thin-vnc:8080/cmd?cmd=connect' by obtaining a valid SID without any kind of authentication. It is possible to achieve code execution on the server by sending keyboard or mouse events to the server.

Affected

ProductAffectedFixed inSource
ThinVNC1.0b1–CNA

Scores by source

NVD10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

References

reffluidattacks.com/advisories/sinatra