CVE-2022-45481 - CVE House

Status published Unknown CVE-2022-45481

The default configuration of Lazy Mouse does not require a...

0 CVSS

Vulnerability Description

The default configuration of Lazy Mouse does not require a password, allowing remote unauthenticated users to execute arbitrary code with no prior authorization or authentication. CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-45481

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

https://www.synopsys.com/blogs/software-security/cyrc-advisory-remote-code-execution-vulnerabilities-mouse-keyboard-apps/

More from thisAAY

View All →

CVE-2022-45483

Lazy Mouse allows an attacker (in a man in the...

Unknown 0

CVE-2022-45482

Lazy Mouse server enforces weak password requirements and doesn't implement...

Unknown 0

Affected Vendor

thisAAY

View all reports →

Affected Software

Lazy Mouse

Vulnerable Versions:

<= 2.0.1

Timeline

Official Publish: December 5th, 2022

Last Modified: April 24th, 2025

Added to House: July 21st, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

CWE-306

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application