The VNC server package must not be installed unless required.

The VNC service uses weak authentication capabilities and provides the user complete graphical system access.

Determine if the VNC server package is installed.

# pkg list x11/server/xvnc

If an installed package named "x11/server/xvnc is listed" is listed, this is a finding.

The Software Installation Profile is required.

# pfexec pkg uninstall x11/server/xvnc