Lucene search
HistoryDec 05, 2022 - 9:15 p.m.
CVE-2022-45481
lazy mouse
remote access
arbitrary code execution
authentication bypass
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.004
Percentile
73.6%
The default configuration of Lazy Mouse does not require a password, allowing remote unauthenticated users to execute arbitrary code with no prior authorization or authentication. CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected configurations
Node
lzmouselazy_mouseRange≤2.0.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| lzmouse | lazy_mouse | * | cpe:2.3:a:lzmouse:lazy_mouse:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2022-45481
2022-12-05 00:00:00
prion
prion
Default configuration
2022-12-05 21:15:00
cve
cve
CVE-2022-45481
2022-12-05 21:15:10
githubexploit
githubexploit
malwarebytes
malwarebytes
Time to uninstall! Abandoned Android apps pack a vulnerability punch
2022-12-02 10:30:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.004
Percentile
73.6%
Related for NVD:CVE-2022-45481