CVE-2001-1422

CVE-2001-1422 describes a critical authentication bypass vulnerability in WinVNC versions 3.3.3 and earlier. The flaw stems from the software generating identical challenge strings for multiple connection attempts, enabling remote attackers to intercept and reuse legitimate challenge-response pairs to gain unauthorized access. With a CVSS score of 7.5 (HIGH), this vulnerability is easily exploitable over the network with low complexity, potentially leading to full compromise of confidentiality, integrity, and availability. Despite its age and severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.