CVE-2022-45481

CVSS V2 None CVSS V3 None

Description

The default configuration of Lazy Mouse does not require a password, allowing remote unauthenticated users to execute arbitrary code with no prior authorization or authentication. CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Overview

CVE ID
CVE-2022-45481

Assigner
disclosure@synopsys.com

Vulnerability Status
Analyzed

Published Version
2022-12-05T21:15:10

Last Modified Date
2022-12-08T15:23:30

Weakness Enumerations

CWE	URL
CWE-306	http://cwe.mitre.org/data/definitions/306.html

CPE Configuration (Product)

CPE	Vulnerable	Operator	Version Start	Version End
cpe:2.3:a:lzmouse:lazy_mouse::::::::	1	OR		2.0.1

References

Reference URL	Reference Tags
https://www.synopsys.com/blogs/software-security/cyrc-advisory-remote-code-execution-vulnerabilities-mouse-keyboard-apps/

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2022-45481
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45481

History

Created	Old Value	New Value	Data Type	Notes
2022-12-07 18:06:36				Added to TrackCVE
2022-12-08 17:15:24	2022-12-05T21:15:10.387	2022-12-05T21:15:10	CVE Published Date	updated
2022-12-08 17:15:24		2022-12-08T15:23:30	CVE Modified Date	updated
2022-12-08 17:15:24	Undergoing Analysis	Analyzed	Vulnerability Status	updated
2022-12-08 17:15:24		CWE-306	Weakness Enumeration	new
2022-12-08 17:15:25			CPE Information	updated