CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.8. See the original NVD description below for full technical details.
CVE
CVE-2011-1775
Severity
MEDIUM
CVSS
5.8
EPSS
1.29%
Original NVD Description
The CSecurityTLS::processMsg function in common/rfb/CSecurityTLS.cxx in the vncviewer component in TigerVNC 1.1beta1 does not properly verify the server's X.509 certificate, which allows man-in-the-middle attackers to spoof a TLS VNC server via an arbitrary certificate.