CVE-2025-27457CWE-319

CVE-2025-27457

Medium · published July 3, 2025

CVSS v3.1
6.5
EPSS
0%
Percentile
20.5
In the wild
Unconfirmed
What it is

All communication between the VNC server and client(s) is unencrypted. This allows an attacker to intercept the traffic and obtain sensitive data.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00291 · 20.5th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2025-07-03T11:32Z
EPSS history
Timeline
  • 03 JUL 11:32Z
    CVE-2025-27457
    cvelistv5