PT-2025-30586 · Steppschuh · Dg Remote Control Server

H4Rk3Nz0 · Published 2025-07-23 · Updated 2025-07-23 · CVE-2022-4978

Positive Technologies (AI Summary)

CVSS v4.0

9.3

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Remote Control Server versions 3.1.1.12

Description Remote Control Server, maintained by Steppschuh, allows unauthenticated remote code execution when authentication is disabled, which is the default configuration. The server exposes a custom UDP-based control protocol that accepts remote keyboard input events without verification. An attacker on the same network can issue a sequence of keystroke commands to launch a system shell and execute arbitrary commands, resulting in full system compromise.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Missing Authentication

OS Command Injection

Weakness Enumeration

CWE-306

CWE-78

Related Identifiers

CVE-2022-4978

Affected Products

Dg Remote Control Server

References · 6

• 🔥 https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/misc/remote_control_collection_rce.rb · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-4978 · Security Note
• https://remote-control-collection.com · Note
• https://t.me/CVEtracker/28493 · Telegram Post
• https://vulncheck.com/advisories/steppschuh-remote-control-server-unauth-rce · Note
• https://twitter.com/CVEnew/status/1948024980978999562 · Twitter Post