CVE-2022-45482 — thisAAY / Lazy Mouse

Description (CNA)

Lazy Mouse server enforces weak password requirements and doesn't implement rate limiting, allowing remote unauthenticated users to easily and quickly brute force the PIN and execute arbitrary commands. CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected (CNA)

Vendor / product	Versions
thisAAY / Lazy Mouse	affected <= 2.0.1

CWE

CWE-521

References

https://www.synopsys.com/blogs/software-security/cyrc-advisory-remote-code-execution-vulnerabilities-mouse-keyboard-apps/

ADP enrichment

CVE

No English description supplied.

https://www.synopsys.com/blogs/software-security/cyrc-advisory-remote-code-execution-vulnerabilities-mouse-keyboard-apps/

CISA-ADP

No English description supplied.

No references supplied.