CVE-2025-27459CWE-257

CVE-2025-27459

Medium · published July 3, 2025

CVSS v3.1
4.4
EPSS
0%
Percentile
14.1
In the wild
Unconfirmed
What it is

The VNC application stores its passwords encrypted within the registry but uses DES for encryption. As DES is broken, the original passwords can be recovered.

The record
Technical detail
CVSS v3.1
4.4 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00239 · 14.1th percentile
Weakness
CWE-257 · Storing Passwords in a Recoverable Format
Published
2025-07-03T11:33Z
EPSS history
Timeline
  • 03 JUL 11:33Z
    CVE-2025-27459
    cvelistv5