PatchTheCVEultravnc vulnerabilities
Recent CVEs affecting ultravnc products. 2 tracked.
ultravnc has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2016-08-25. Highest priority: CVE-2016-5673 (score 51/100).
- CVE-2016-5673 HIGH 7.5 UPGRADE UltraVNC Repeater before 1300 does not restrict destination IP addresses or TCP ports, which allows remote att
- CVE-2010-5248 MEDIUM 6.9 DOWNGRADE Untrusted search path vulnerability in UltraVNC 1.0.8.2 allows local users to gain privileges via a Trojan hor
FAQ
How do I fix ultravnc vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ultravnc being exploited right now?
None of the tracked ultravnc CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ultravnc CVE should I patch first?
CVE-2016-5673 currently ranks highest (51/100): UltraVNC Repeater before 1300 does not restrict destination IP addresses or TCP ports, which allows remote att.