CVE-2022-3365

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Due to reliance on a trivial substitution cipher, sent in cleartext, and the reliance on a default password when the user does not set a password, the Remote Mouse Server by Emote Interactive can be abused by attackers to inject OS commands over theproduct's custom control protocol. A Metasploit module was written and tested against version 4.110, the current version when this CVE was reserved.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-327

Affected software

No affected versions have been published.

Timeline

Published
Jan 28, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2022

CVE-2022-336504.9Azure Site Recovery Elevation of Privilege VulnerabilityCVE-2022-336514.9Azure Site Recovery Elevation of Privilege VulnerabilityCVE-2022-336524.9Azure Site Recovery Elevation of Privilege VulnerabilityCVE-2022-336534.9Azure Site Recovery Elevation of Privilege VulnerabilityCVE-2022-336544.9Azure Site Recovery Elevation of Privilege VulnerabilityCVE-2022-336556.5Azure Site Recovery Elevation of Privilege VulnerabilityCVE-2022-336566.5Azure Site Recovery Elevation of Privilege VulnerabilityCVE-2022-336576.5Azure Site Recovery Elevation of Privilege VulnerabilityCVE-2022-336584.9Azure Site Recovery Elevation of Privilege VulnerabilityCVE-2022-336594.9Azure Site Recovery Elevation of Privilege VulnerabilityCVE-2022-33667.2The PublishPress Capabilities WordPress plugin before 2.5.2, PublishPress Capabilities Pro WordPress plugin before 2.5.2 unserializes the coCVE-2022-336604.9Azure Site Recovery Elevation of Privilege Vulnerability
CVE-2022-3365: Critical severity, CVSS 9.8 | Vulnix