CyberSecBulletin

thisAAY vulnerabilities

We track 2 vulnerabilities in thisAAY products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on December 5, 2022.

2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score

Latest thisAAY vulnerabilities

  • 9.8 Critical severity

    Lazy Mouse: Missing Authentication for Critical Functionality

    CVE-2022-45481thisAAYEPSS 1.8%

    The default configuration of Lazy Mouse does not require a password, allowing remote unauthenticated users to execute arbitrary code with no prior authorization or authentication. CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • 9.8 Critical severity

    Lazy Mouse: Weak Password Requirements

    CVE-2022-45482thisAAYEPSS 1.41%

    Lazy Mouse server enforces weak password requirements and doesn't implement rate limiting, allowing remote unauthenticated users to easily and quickly brute force the PIN and execute arbitrary commands. CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H