Back to search
CVE-2022-3365
Published: Jan 28, 2025
Modified: Jan 28, 2025
PUBLISHED
Description
Due to reliance on a trivial substitution cipher, sent in cleartext, and the reliance on a default password when the user does not set a password, the Remote Mouse Server by Emote Interactive can be abused by attackers to inject OS commands over theproduct's custom control protocol. A Metasploit module was written and tested against version 4.110, the current version when this CVE was reserved.
| Vendor | Product | Versions |
|---|---|---|
Emote Interactive | Remote Mouse Server | affected 0 - <= 4.110 |
Weaknesses (CWE)
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now