VULNERABILITY INTELLIGENCE

CVE-2022-45482

CVSS score9.8 CRITICAL
EPSS probability1.38%
CISA KEVNot currently listed
Published2022-12-02
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Lazy Mouse server enforces weak password requirements and doesn't implement rate limiting, allowing remote unauthenticated users to easily and quickly brute force the PIN and execute arbitrary commands. CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness classification

  • CWE-521: Weak Password Requirements

Primary references