CVE-2016-5673

HIGH 7.5CVE-2016-5673 · Published 25/08/2016 · updated 17/06/2026

In short

CVE-2016-5673 is a HIGH (CVSS 7.5) vulnerability affecting repeater (ultravnc).
Chance of exploitation in the next 30 days (EPSS): 1.9%, higher than 79.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
repeater ultravnc	`≤ 1201`	No fix yet

Description

UltraVNC Repeater before 1300 does not restrict destination IP addresses or TCP ports, which allows remote attackers to obtain open-proxy functionality by using a :: substring in between the IP address and port number.

References

kb.cert.org/vuls/id/735416 · Third Party Advisory
kb.cert.org/vuls/id/BLUU-A9WQVP · Third Party Advisory
securityfocus.com/bid/92348

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free