{"vulnerability": "CVE-2022-3365", "sightings": [{"uuid": "9fedba66-b95f-4527-bbc8-aeea2b4740e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-3365", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113907475639920724", "content": "", "creation_timestamp": "2025-01-28T18:49:11.170995Z"}, {"uuid": "8d9c869e-427d-49a4-98e5-4cf6f3743236", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-3365", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:45.000000Z"}, {"uuid": "63d0cd2f-e5cd-4983-9720-2cad93aa7bd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-3365", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113903163811923872", "content": "", "creation_timestamp": "2025-01-28T00:32:30.634701Z"}, {"uuid": "87bb25fc-a51d-443c-81d3-df2b8c7f66ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-3365", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgrbrf3ayt2n", "content": "", "creation_timestamp": "2025-01-28T01:15:46.425018Z"}, {"uuid": "d1a76e47-1866-4ee8-8948-f76368a0fbf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-3365", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:47.000000Z"}, {"uuid": "e2b38921-e8d3-40d9-a69b-be29912960f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-3365", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/remote_mouse_rce.rb", "content": "", "creation_timestamp": "2022-10-04T17:04:11.000000Z"}, {"uuid": "06bf1c47-d725-49ec-b07f-5beff2c5dd5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-3365", "type": "seen", "source": "MISP/d0bda5d9-8cbc-4c6c-8803-a5e3150f9ec2", "content": "", "creation_timestamp": "2025-09-01T19:03:02.000000Z"}, {"uuid": "90a3eccf-f192-46ef-b2f3-83c51691c3de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-3365", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3228", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-3365\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Due to reliance on a trivial substitution cipher, sent in cleartext, and the reliance on a default password when the user does not set a password, the Remote Mouse Server by Emote Interactive can be abused by attackers to inject OS commands over theproduct's custom control protocol. A Metasploit module was written and tested against version 4.110, the current version when this CVE was reserved.\n\ud83d\udccf Published: 2025-01-28T03:31:13Z\n\ud83d\udccf Modified: 2025-01-28T03:31:13Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2022-3365\n2. https://github.com/rapid7/metasploit-framework/pull/17067", "creation_timestamp": "2025-01-28T04:09:32.000000Z"}, {"uuid": "d47be466-cac9-47ae-89dc-e4acde4dadf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-3365", "type": "published-proof-of-concept", "source": "https://t.me/cvedetector/16564", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-3365 - Emote Interactive Remote Mouse Server OS Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2022-3365 \nPublished : Jan. 28, 2025, 1:15 a.m. | 1\u00a0hour, 53\u00a0minutes ago \nDescription : Due to reliance on a trivial substitution cipher, sent in cleartext, and the reliance on a default password when the user does not set a password, the Remote Mouse Server by Emote Interactive can be abused by attackers to inject OS commands over theproduct's custom control protocol. A Metasploit module was written and tested against version 4.110, the current version when this CVE was reserved. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-28T04:34:42.000000Z"}, {"uuid": "9384344b-1ddb-4d33-94ae-d6059522171f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-3365", "type": "published-proof-of-concept", "source": "Telegram/b4Ij6ILguClfnun-1FAm0N5VE6A5vgB_EHkGKTKp2jDsHklF", "content": "", "creation_timestamp": "2025-01-28T03:22:55.000000Z"}, {"uuid": "44305f6a-9d0c-4804-bb52-41823f8a4b5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-3365", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/remote_mouse_rce.rb", "content": "{\"aliases\": [], \"arch\": \"x64, x86\", \"author\": [\"h00die\", \"0RPHON\", \"H4rk3nz0\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"This module utilizes the Remote Mouse Server by Emote Interactive protocol\\n          to deploy a payload and run it from the server on versions < 4.200 (500 server response).\\n          This module will only deploy\\n          a payload if the server is set without a password (default).\\n          Tested against 4.110, current at the time of module writing\", \"disclosure_date\": \"2019-04-15\", \"fullname\": \"exploit/windows/misc/remote_mouse_rce\", \"is_install_path\": true, \"mod_time\": \"2022-10-17 15:30:17 +0000\", \"name\": \"Remote Mouse RCE\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\", \"screen-effects\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/windows/misc/remote_mouse_rce.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/misc/remote_mouse_rce\", \"references\": [\"EDB-46697\", \"CVE-2022-3365\", \"URL-https://www.remotemouse.net/\", \"URL-https://github.com/H4rk3nz0/PenTesting/blob/main/Exploits/remote%20mouse/remote-mouse-rce.py\"], \"rport\": 1978, \"session_types\": false, \"targets\": [\"default\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:21.428837Z"}]}