Exploitation Summary
EIP tracks 1 public exploit for CVE-2022-4978.
PoCs published by h00die, H4rk3nz0, including Metasploit module exploits/windows/misc/remote_control_collection_rce.
AI-analyzed exploit summary This Metasploit module exploits CVE-2022-4978 in Remote Control Collection by leveraging UDP-based key injection to open a command prompt, download a payload via HTTP, and execute it on the target system. It requires no authentication and targets default configurations.
Description
Remote Control Server, maintained by Steppschuh, 3.1.1.12 allows unauthenticated remote code execution when authentication is disabled, which is the default configuration. The server exposes a custom UDP-based control protocol that accepts remote keyboard input events without verification. An attacker on the same network can issue a sequence of keystroke commands to launch a system shell and execute arbitrary commands, resulting in full system compromise.
Exploits (1)
This Metasploit module exploits CVE-2022-4978 in Remote Control Collection by leveraging UDP-based key injection to open a command prompt, download a payload via HTTP, and execute it on the target system. It requires no authentication and targets default configurations.
References (3)
Scores
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N