PT-2022-27538 · Unknown · Lazy Mouse Server

Mohammed Alshehri · Published 2022-12-02 · Updated 2022-12-05 · CVE-2022-45482

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Lazy Mouse server (affected versions not specified)

Description The issue allows remote unauthenticated users to easily and quickly brute force the PIN and execute arbitrary commands due to weak password requirements and the lack of rate limiting.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-521

Related Identifiers

CVE-2022-45482

Affected Products

Lazy Mouse Server

References · 4

• https://osv.dev/vulnerability/CVE-2022-45482 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-45482 · Security Note
• https://synopsys.com/blogs/software-security/cyrc-advisory-remote-code-execution-vulnerabilities-mouse-keyboard-apps · Note
• https://t.me/cibsecurity/53802 · Telegram Post