mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-25 20:57:49 +02:00
1.2 KiB
1.2 KiB
CVE-2022-4978
Description
Remote Control Server, maintained by Steppschuh, 3.1.1.12 allows unauthenticated remote code execution when authentication is disabled, which is the default configuration. The server exposes a custom UDP-based control protocol that accepts remote keyboard input events without verification. An attacker on the same network can issue a sequence of keystroke commands to launch a system shell and execute arbitrary commands, resulting in full system compromise.
POC
Reference
Github
No PoCs found on GitHub currently.