CVE-2022-45481

CVE-2022-45481 is a critical vulnerability affecting the default configuration of Lazy Mouse, allowing remote unauthenticated users to execute arbitrary code without prior authorization. This flaw, rated 9.8 CVSS, stems from a lack of password requirement, enabling attackers to fully compromise affected systems with high impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion and media coverage, indicating high awareness. Organizations using Lazy Mouse should prioritize mitigation to prevent potential attacks.