PT-2022-16771 · Zz · Keymouse

Published 2022-03-07 · Updated 2023-01-14 · CVE-2022-24644

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ZZ Inc. KeyMouse versions 3.08 and prior

Description The issue concerns a remote code execution vulnerability that can be exploited during an unauthenticated update. To trigger the vulnerability, an update of an affected KeyMouse installation must be initiated.

Recommendations For ZZ Inc. KeyMouse versions 3.08 and prior, update to a version later than 3.08 to resolve the issue.

Exploit

Fix

Weakness Enumeration

CWE-494

Related Identifiers

CVE-2022-24644

Affected Products

Keymouse

References · 5

• 🔥 https://github.com/gerr-re/cve-2022-24644/blob/main/cve-2022-24644_public-advisory.pdf · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-24644 · Security Note
• http://keymouse.com · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-24644 · Vendor Advisory
• https://t.me/cybersecuritytechnologies/7548 · Telegram Post