CVE-2022-45482 Vulnerability Details

  /     /     /  

CVE-2022-45482 Metadata Quick Info

CVE Published: 02/12/2022 | CVE Updated: 03/08/2024 | CVE Year: 2022
Source: SNPS | Vendor: thisAAY | Product: Lazy Mouse
Status : PUBLISHED

---

CVE-2022-45482 Description

Lazy Mouse server enforces weak password requirements and doesn\'t implement rate limiting, allowing remote unauthenticated users to easily and quickly brute force the PIN and execute arbitrary commands. CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-521
CWE Name: CWE-521: Weak Password Requirements
Source: thisAAY

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).