CVE-2016-5673

—

CVSS 3.0

7.5 high

EPSS

2%p78

Published

Aug 25, 2016 (Aug 25, 2016)

Modified

Jun 17, 2026

Description

UltraVNC Repeater before 1300 does not restrict destination IP addresses or TCP ports, which allows remote attackers to obtain open-proxy functionality by using a :: substring in between the IP address and port number.

Vendors: ultravnc
Products: repeater
Weakness: CWE-284
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (1.9%)

In the news0 stories

No ingested article mentions this CVE yet.