What’s Vulnerable › Vulnerabilities

CVE-2002-1848

• Severity: low (CVSS 2.1 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2002-12-31 · updated 2026-06-16

Description

TightVNC before 1.2.4 running on Windows stores unencrypted passwords in the password text control of the WinVNC Properties dialog, which could allow local users to access passwords.

Affected products

• Kaspersky TightVNC: 1.2, 1.2.1, 1.2.2, 1.2.3

References

• http://www.securityfocus.com/bid/4835
• http://www.tightvnc.com/changelog-win32.html
• http://www.securityfocus.com/bid/4835
• http://www.tightvnc.com/changelog-win32.html

Get alerted when CVE-2002-1848 or the next vulnerability affects your stack