VULNERABILITY INTELLIGENCE

CVE-2001-1422

CVSS score7.5 HIGH

EPSS probability2.06%

CISA KEVNot currently listed

Published2001-01-23

Last modified2026-06-16

Description

WinVNC 3.3.3 and earlier generates the same challenge string for multiple connections, which allows remote attackers to bypass VNC authentication by sniffing the challenge and response of other users.