A software tool designed to allow legitimate remote access to computer desktops has vulnerabilities that leave critical infrastructure operators open to cyberattacks, according to a cybersecurity company.

The virtual network computing tool, designed to allow remote desktop sharing, is often used in tech help-desk situations or when a computer user is traveling or wants to access a second computer in the house. However, cybersecurity firm Cyble has found more than 8,000 instances of VNC not being protected by user authentication, including many exposed installations in the United States, Western Europe, and China.