Vulnerabilities > CVE-2006-4309 - Remote Unauthorized Administrative Access vulnerability in Ak-Systems Windows Terminal 1.2.5Exvlp

047910
CVSS 10.0 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
network
low complexity
ak-systems
critical

Summary

VNC server on the AK-Systems Windows Terminal 1.2.5 ExVLP is not password protected, which allows remote attackers to login and view RDP or Citrix sessions.

Vulnerable Configurations

Part Description Count
Application
Ak-Systems
1