What’s Vulnerable › Vulnerabilities
CVE-2022-4978: Steppschuh Remote Control Server 3.1.1.12 Unauthenticated RCE
- Severity: critical (CVSS 9.3 v4.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 2.5% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-07-23 · updated 2026-06-17
- Weakness: CWE-78
Description
Remote Control Server, maintained by Steppschuh, 3.1.1.12 allows unauthenticated remote code execution when authentication is disabled, which is the default configuration. The server exposes a custom UDP-based control protocol that accepts remote keyboard input events without verification. An attacker on the same network can issue a sequence of keystroke commands to launch a system shell and execute arbitrary commands, resulting in full system compromise.
Affected products
References
- https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/misc/remote_control_collection_rce.rb
- https://remote-control-collection.com/
- https://www.vulncheck.com/advisories/steppschuh-remote-control-server-unauth-rce
Get alerted when CVE-2022-4978 or the next vulnerability affects your stack