Lazy Mouse ProjectCVEs & Vulnerabilities
2 CVEs affecting Lazy Mouse Project products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.
2 CVEs→ All vendors
Most Affected Products
lazy mouse 2
CVE-2022-45483MEDIUM
Lazy Mouse allows an attacker (in a man in the middle position between the server and a connected device) to see all data (including keypresses) in cleartext. CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
2 Dec 2022
5.9
CVSS
CVE-2022-45482CRITICAL
Lazy Mouse server enforces weak password requirements and doesn't implement rate limiting, allowing remote unauthenticated users to easily and quickly brute force the PIN and execute arbitrary commands. CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
2 Dec 2022
9.8
CVSS
← PrevPage 1 / 1Next →