CVE-2022-45482

Critical

Lazy Mouse server enforces weak password requirements and doesn't implement rate limiting, allowing remote unauthenticated users to easily…

SNPS·CWE-521·Published 2022-12-02

CVSS

9.8

EPSS

0.01

KEV

Exploits

cve.orgen

247 chars

Lazy Mouse server enforces weak password requirements and doesn't implement rate limiting, allowing remote unauthenticated users to easily and quickly brute force the PIN and execute arbitrary commands. CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVDen

247 chars

NVDes

265 chars

El servidor Lazy Mouse impone requisitos de contraseña débiles y no implementa limitación de velocidad, lo que permite a usuarios remotos no autenticados forzar fácil y rápidamente el PIN y ejecutar comandos arbitrarios. CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	9.8	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
3.1	Primary	NVD	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H