CVE-2013-6766

CVE-2013-6766 describes an authentication bypass vulnerability in OpenVAS Administrator versions 1.2 prior to 1.2.2 and 1.3 prior to 1.3.2. A remote attacker can exploit this flaw by sending a specially crafted OAP request for version information, tricking the system into setting the authentication state to CLIENT_AUTHENTIC and allowing the execution of OAP commands. With a CVSS score of 7.5, this vulnerability is considered high severity, enabling an unauthenticated attacker to achieve partial confidentiality, integrity, and availability impacts with low attack complexity. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.