CVE-2022-4978

Remote Control Server, maintained by Steppschuh, 3.1.1.12 allows unauthenticated remote code execution when authentication is disabled, which is the default configuration. The server exposes a custom UDP-based control protocol that accepts remote keyboard input events without verification. An...

CVE-2022-4978

CVE-2022-4978 affects Remote Control Server 3.1.1.12 by Steppschuh. An unauthenticated RCE is possible via a UDP-based control protocol that accepts remote keystroke events without verification, allowing an attacker on the same network to launch a system shell and execute arbitrary commands, resu...