Lucene search
HistorySep 19, 2022 - 5:15 p.m.
CVE-2022-3218
wifi mouse
authentication
vulnerability
remote code execution
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.881
Percentile
98.7%
Due to a reliance on client-side authentication, the WiFi Mouse (Mouse Server) from Necta LLC’s authentication mechanism is trivially bypassed, which can result in remote code execution.
Affected configurations
Node
nectawifi_mouse_serverMatch1.7.8.5
| Vendor | Product | Version | CPE |
|---|---|---|---|
| necta | wifi_mouse_server | 1.7.8.5 | cpe:2.3:a:necta:wifi_mouse_server:1.7.8.5:*:*:*:*:*:*:* |
Related
prion
prion
Remote code execution
2022-09-19 17:15:00
cvelist
cvelist
packetstorm
packetstorm
WiFi Mouse 1.8.3.4 Remote Code Execution
2022-09-26 00:00:00
zdt
zdt
WiFi Mouse 1.8.3.4 Remote Code Execution Exploit
2022-09-26 00:00:00
metasploit
metasploit
Wifi Mouse RCE
2022-09-05 12:16:49
cve
cve
CVE-2022-3218
2022-09-19 17:15:14
checkpoint_advisories
checkpoint_advisories
Necta LLC WiFi Mouse Command Injection (CVE-2022-3218)
2022-11-17 00:00:00
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up
2022-09-30 18:47:25
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.881
Percentile
98.7%
Related for NVD:CVE-2022-3218