← Vulnerability feed

Vulnerability record · CVE-2022-24644 · published 10 March 2022

CVE-2022-24644: Zzinc keymouse firmware download of code without integrity check vulnerability

ZZzinc · Keymouse Firmware

ZZ Inc. KeyMouse Windows 3.08 and prior is affected by a remote code execution vulnerability during an unauthenticated update. To exploit this vulnerability, a user must trigger an update of an affected installation of KeyMouse.

8.8 CVSS 3.1 High EPSS 1.9% · top 21.0% CWE-494 · Download of code without integrity check
8.8CVSS 3.1 base score, v2 6.8
1.9%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References, 2 tagged exploit
9 Jul 2026Last modified by NVD

Description

ZZ Inc. KeyMouse Windows 3.08 and prior is affected by a remote code execution vulnerability during an unauthenticated update. To exploit this vulnerability, a user must trigger an update of an affected installation of KeyMouse.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/gerr-re/cve-2022-24644/blob/main/cve-2022-24644_public-advisory.pdf ExploitThird Party Advisory
https://github.com/gerr-re/cve-2022-24644/blob/main/cve-2022-24644_public-advisory.pdf ExploitThird Party Advisory

Track CVE-2022-24644 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2016-1329Samsung x14j firmware improper authentication vulnerabilityCisco NX-OS 6.0(2)U6(1) through 6.0(2)U6(5) on Nexus 3000 devices and 6.0(2)A6(1) through 6.0(2)A6(5) and 6.0(2)A7(1) on Nexus 3500 devices has hardc…EPSS 3.7%8.8CVE-2016-1302Samsung x14j firmware improper access control vulnerabilityCisco Application Policy Infrastructure Controller (APIC) devices with software before 1.0(3h) and 1.1 before 1.1(1j) and Nexus 9000 ACI Mode switche…EPSS 2.2%7.5CVE-2015-6313Sun opensolaris vulnerabilityCisco TelePresence Server 4.1(2.29) through 4.2(4.17) on 7010; Mobility Services Engine (MSE) 8710; Multiparty Media 310, 320, and 820; and Virtual M…EPSS 2.7%7.5CVE-2015-6312Dell emc powerscale onefs memory buffer overflow vulnerabilityCisco TelePresence Server 3.1 on 7010, Mobility Services Engine (MSE) 8710, Multiparty Media 310 and 320, and Virtual Machine (VM) devices allows rem…EPSS 1.9%7.5CVE-2016-1350Cisco ios xe vulnerabilityCisco IOS 15.3 and 15.4, Cisco IOS XE 3.8 through 3.11, and Cisco Unified Communications Manager allow remote attackers to cause a denial of service …EPSS 3.3%7.5CVE-2016-1349Cisco ios xe vulnerabilityThe Smart Install client implementation in Cisco IOS 12.2, 15.0, and 15.2 and IOS XE 3.2 through 3.7 allows remote attackers to cause a denial of ser…EPSS 1.9%7.5CVE-2016-1348Cisco ios xe vulnerabilityCisco IOS 15.0 through 15.5 and IOS XE 3.3 through 3.16 allow remote attackers to cause a denial of service (device reload) via a crafted DHCPv6 Rela…EPSS 1.9%7.5CVE-2015-0718Cisco unified computing system vulnerabilityCisco NX-OS 4.0 through 6.1 on Nexus 1000V 3000, 4000, 5000, 6000, and 7000 devices and Unified Computing System (UCS) platforms allows remote attack…EPSS 3.9%

Source: NIST National Vulnerability Database (record CVE-2022-24644), CISA KEV, FIRST EPSS (scores of 2026-10-08). This page is refreshed as NVD updates the record.