AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2022-4978

UNKNOWN · CVSS N/A EPSS 1.56% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2025-07-23 · Last synced 2026-08-04

CyberRota Analysis

This vulnerability has an unknown severity rating. Public exploit code or proof-of-concept references have been detected in its references. It may be remotely exploitable.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
remote code execution code execution
External Security References

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2022-4978
Severity
UNKNOWN
CVSS
N/A
EPSS
1.56%

Original NVD Description

Remote Control Server, maintained by Steppschuh, 3.1.1.12 allows unauthenticated remote code execution when authentication is disabled, which is the default configuration. The server exposes a custom UDP-based control protocol that accepts remote keyboard input events without verification. An attacker on the same network can issue a sequence of keystroke commands to launch a system shell and execute arbitrary commands, resulting in full system compromise.