CVE-2022-4978 Steppschuh Remote Control Server 3.1.1.12 Unauthenticated RCE

Remote Control Server, maintained by Steppschuh, 3.1.1.12 allows unauthenticated remote code execution when authentication is disabled, which is the default configuration. The server exposes a custom UDP-based control protocol that accepts remote keyboard input events without verification. An...

CVE-2022-4978

CVE-2022-4978 affects Remote Control Server 3.1.1.12 by Steppschuh. An unauthenticated RCE is possible via a UDP-based control protocol that accepts remote keystroke events without verification, allowing an attacker on the same network to launch a system shell and execute arbitrary commands, resu...

CVE-2022-4978

creationtimestamp| type| source ---|---|--- 2022-11-28 21:16:21+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/remotecontrolcollectionrce.rb 2025-10-23 21:13:00+00:00| seen| MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7...