Unrated severityNVD Advisory· Published Jan 23, 2001· Updated Jun 16, 2026

CVE-2001-1422

Description

WinVNC 3.3.3 and earlier generates the same challenge string for multiple connections, which allows remote attackers to bypass VNC authentication by sniffing the challenge and response of other users.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Att/Winvnc
cpe:2.3:a:att:winvnc:*:*:*:*:*:*:*:*
Range: <=3.3.3
WinVNC/WinVNCllm-create
Range: <=3.3.3

Patches

Vulnerability mechanics

References

www.kb.cert.org/vuls/id/303080nvdThird Party AdvisoryUS Government Resource
www.securityfocus.com/bid/2275nvdVendor Advisory
www1.corest.com/common/showdoc.phpnvdVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/5992nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000