CVE-2020-13872

CVE-2020-13872 describes an authentication bypass vulnerability in Royal TS before version 5, affecting both Windows and macOS platforms. The flaw stems from a 0.0.0.0 listener, which allows attackers on the same network to bypass tunnel authentication through brute-force attacks. With a CVSS score of 8.8 (High), this vulnerability is easily exploitable over the network with low attack complexity, potentially leading to high impact on confidentiality, integrity, and availability. While there is no known active exploitation, public exploit code, or Metasploit/Nuclei modules, the vulnerability has garnered some community discussion, indicating awareness.