CVE-2006-2369

CVE-2006-2369 describes an authentication bypass vulnerability in RealVNC 4.1.1 and other products utilizing RealVNC, such as AdderLink IP and Cisco CallManager. Attackers can force an insecure "Type 1 - None" security type, even if not offered by the server, to gain unauthorized access. This critical vulnerability has a CVSS score of 7.5, indicating a network-based attack with low complexity, potentially leading to full compromise of confidentiality, integrity, and availability. While not on the KEV catalog or Hot List, multiple public exploits exist, including Metasploit modules and several ExploitDB entries, suggesting a high likelihood of exploitation. Despite its age and high EPSS/FAUCET risk scores, there is no recorded community discussion or media coverage.