CVE-2022-3365

9.8 criticalEPSS 2.1%

Due to reliance on a trivial substitution cipher, sent in cleartext, and the reliance on a default password when the user does not set a password, the Remote Mouse Server by Emote Interactive can be abused by attackers to inject OS commands over theproduct's custom control protocol. A Metasploit module was written and tested against version 4.110, the current version when this CVE was reserved.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.1% chance of exploitation in the next 30 days; higher than 81% of CVEs (scores of 2026-10-31)
CWE: CWE-327
Published: 2025-01-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://github.com/rapid7/metasploit-framework/pull/17067

Check your stack JSON