Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A vulnerability was identified in the NVDA Remote (version 2.6.4) and Tele NVDA Remote (version 2025.3.3) remote connection add-ons, which allows an attacker to obtain total control of the remote system by guessing a weak password. The problem occurs because these add-ons accept any password entered by the user and do not have an additional authentication or computer verification mechanism. Tests indicate that more than 1,000 systems use easy-to-guess passwords, many with less than 4 to 6 characters, including common sequences. This allows brute force attacks or trial-and-error attempts by malicious invaders. The vulnerability can be exploited by a remote attacker who knows or can guess the password used in the connection. As a result, the attacker gains complete access to the affected system and can execute commands, modify files, and compromise user security.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
NVDA 安全漏洞
Vulnerability Description
NVDA（Nonvisual Desktop Access）是NV Access开源的一个非视觉桌面访问系统。 NVDA 2024.4.1版本和2024.4.2版本存在安全漏洞，该漏洞源于远程连接组件接受弱密码，可能导致系统被完全控制。
CVSS Information
N/A
Vulnerability Type
N/A