CVE-2022-4978 – Steppschuh Remote Control Server UDP Keystroke Injection RCE

CVE ID : CVE-2022-4978

Published : 23. Juli 2025 14:15 | 44 Minuten ago

Description : Remote Control Server, maintained by Steppschuh, 3.1.1.12 allows unauthenticated remote code execution when authentication is disabled, which is the default configuration. The server exposes a custom UDP-based control protocol that accepts remote keyboard input events without verification. An attacker on the same network can issue a sequence of keystroke commands to launch a system shell and execute arbitrary commands, resulting in full system compromise.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…