CVE-2019-17662
82Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actepss 97%
from disclosure to weapon1 days
Published on NVDOct 16
1st PoC+1d
metasploitOct 16
VulnCheckOct 16
exploitation probability
97%top 1% of all CVEs
observed exploitation
yesVulnCheck
14 public exploit(s)
ThinVNC 1.0b1 is vulnerable to arbitrary file read, which leads to a compromise of the VNC server. The vulnerability exists even when authentication is turned on during the deployment of the VNC server. The password for authentication is stored in cleartext in a file that can be read via a ../../ThinVnc.ini directory traversal attack vector.
Affected products
n/a · n/apublic PoCs found — 14✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/47519githubgithub.com/MuirlandOracle/CVE-2019-17662★ 19githubgithub.com/bl4ck574r/CVE-2019-17662★ 2githubgithub.com/whokilleddb/CVE-2019-17662★ 2githubgithub.com/rajendrakumaryadav/CVE-2019-17662-Exploit★ 1githubgithub.com/thomas-osgood/CVE-2019-17662★ 1githubgithub.com/kxisxr/Bash-Script-CVE-2019-17662★ 1githubgithub.com/Tamagaft/CVE-2019-17662★ 0vulncheckvulncheck.com/xdb/93c7f575bdf3unverifiedvulncheckvulncheck.com/xdb/79292c974245unverifiedvulncheckvulncheck.com/xdb/a5e63306220cunverifiedcve_referencepacketstormsecurity.com/files/154896/ThinVNC-1.0b1-Authentication-Bypass.htmlunverifiedvulncheckvulncheck.com/xdb/9ea9a8f715bbunverifiedvulncheckvulncheck.com/xdb/7c31ca06b16aunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.