CVE-2025-27459: High severity VNC VNC vulnerability
Published Jul 3, 2025
·Updated
The VNC application stores its passwords encrypted within the registry but uses DES for encryption. As DES is broken, the original passwords can be recovered.
Affected Software
3 affected components
VNC VNC
All of the following
Endress Meac300-fnade4 Firmware
Endress Meac300-fnade4
Event History
Jul 3, 2025
CVE Published
via MITRE·11:33 AM
Data Sourced
via MITRE·11:33 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·12:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-27459?
CVE-2025-27459 is classified as a high-severity vulnerability due to the use of broken DES encryption for storing passwords.
2
How do I fix CVE-2025-27459?
To fix CVE-2025-27459, you should upgrade to a version of the VNC application that uses a stronger encryption method for password storage.
3
What impact does CVE-2025-27459 have on my system?
CVE-2025-27459 allows attackers to recover stored passwords, potentially compromising sensitive information and system security.
4
Is CVE-2025-27459 easy to exploit?
Yes, CVE-2025-27459 is considered easy to exploit due to the use of broken DES encryption.
5
Which versions of VNC are affected by CVE-2025-27459?
CVE-2025-27459 affects all versions of the VNC application that rely on DES for password encryption.