CVE-2022-3229

EIP tracks 1 public exploit for CVE-2022-3229. PoCs published by h00die, H4RK3NZ0, including Metasploit module exploits/windows/misc/unified_remote_rce.

AI-analyzed exploit summary This Metasploit module exploits CVE-2022-3229, an authentication bypass vulnerability in Unified Remote, to achieve remote code execution by sending crafted packets to the service and deploying a payload via the remote control protocol.

Because the web management interface for Unified Intents' Unified Remote solution does not itself require authentication, a remote, unauthenticated attacker can change or disable authentication requirements for the Unified Remote protocol, and leverage this now-unauthenticated access to run code of the attacker's choosing.