CVE-2022-45478 affects Telepad and telepad-app, allowing a man-in-the-middle attacker to intercept all cleartext data, including keystrokes, between the server and a connected device. This vulnerability has a CVSS score of 5.9 (Medium), indicating a network-based attack with high complexity but significant confidentiality impact. While there is no known active exploitation or public exploit code, the vulnerability has garnered some community discussion and media coverage, including a BleepingComputer article highlighting critical RCE bugs in similar Android remote keyboard apps.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 1.0.7CPE matchmatch criteria | cpe:2.3:a:telepad-app:telepad:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.