Vulnerabilities > Lazy Mouse Project

DATE CVE VULNERABILITY TITLE RISK
2022-12-02 CVE-2022-45482 Weak Password Requirements vulnerability in Lazy Mouse Project Lazy Mouse
Lazy Mouse server enforces weak password requirements and doesn't implement rate limiting, allowing remote unauthenticated users to easily and quickly brute force the PIN and execute arbitrary commands.
network
low complexity
lazy-mouse-project CWE-521
critical
9.8
2022-12-02 CVE-2022-45483 Cleartext Transmission of Sensitive Information vulnerability in Lazy Mouse Project Lazy Mouse
Lazy Mouse allows an attacker (in a man in the middle position between the server and a connected device) to see all data (including keypresses) in cleartext.
network
high complexity
lazy-mouse-project CWE-319
5.9