Dozens of Vulnerabilities Found in Open Source VNC Systems

guest · Nov 22, 2019

Dozens of Vulnerabilities Found in Open Source VNC Systems
November 22, 2019
https://www.securityweek.com/dozens-vulnerabilities-found-open-source-vnc-systems

VNC systems use the remote frame buffer (RFB) protocol to allow users to remotely control a device. According to Kaspersky, VNC is often used in industrial environments and many manufacturers of industrial control systems (ICS) use VNC to add remote administration capabilities to their products.

Kaspersky has analyzed four widely used open source VNC systems, including LibVNC, UltraVNC, TightVNC and TurboVNC. The cybersecurity firm says UltraVNC and TightVNC are often recommended by industrial automation system vendors for connecting to human-machine interfaces (HMIs).

A total of 37 CVE identifiers have been assigned to the vulnerabilities found by Kaspersky in server and client software.
Over 20 of the security bugs were identified in UltraVNC.

“I was surprised to see the simplicity of discovered vulnerabilities, especially considering their significant lifetime,” said Pavel Cheremushkin, a researcher at Kaspersky ICS CERT.
Click to expand...

Kaspersky: VNC vulnerability research

Log in or Sign up

Dozens of Vulnerabilities Found in Open Source VNC Systems

guest Guest

Log in or Sign up

Dozens of Vulnerabilities Found in Open Source VNC Systems

guest Guest

Useful Searches