← Database

CVE-2022-45482

CRITICAL CVSS: 9.8 Published: 2022-12-02 Modified: 2026-06-17

Description

Lazy Mouse server enforces weak password requirements and doesn't implement rate limiting, allowing remote unauthenticated users to easily and quickly brute force the PIN and execute arbitrary commands. CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Platforms

Lazy Mouse Project Lazy Mouse

Weakness Type

CWE-521, CWE-521

References