CVE-2022-45477

—

CVSS 3.1

9.8 critical

EPSS

2%p82

Published

Dec 5, 2022 (Dec 5, 2022)

Modified

Jun 17, 2026

Description

Telepad allows remote unauthenticated users to send instructions to the server to execute arbitrary code without any previous authorization or authentication. CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vendors: telepad-app
Products: telepad
Weakness: CWE-306
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.2%)

In the news2 stories

Android Keyboard Apps with 2 Million downloads can remotely hack your device

Security AffairsDec 2, 11:04 UTC · Dec 2, 2022Vulnerability CVE-2022-45477 CVE-2022-45478 CVE-2022-45479+4 CVEs

Watch Out! These Android Keyboard Apps With 2 Million Installs Can be Hacked Remotely

The Hacker NewsDec 2, 07:52 UTC · Dec 2, 2022Vulnerability CVE-2022-45477 CVE-2022-45483