cve/2022/CVE-2022-3229.md

### [CVE-2022-3229](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3229)
![](https://img.shields.io/static/v1?label=Product&message=Unified%20Remote&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3D%200%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-285%3A%20Improper%20Authorization&color=brighgreen)

### Description

Because the web management interface for Unified Intents' Unified Remote solution does not itself require authentication, a remote, unauthenticated attacker can change or disable authentication requirements for the Unified Remote protocol, and leverage this now-unauthenticated access to run code of the attacker's choosing.

### POC

#### Reference
- https://github.com/rapid7/metasploit-framework/pull/16989

#### Github
No PoCs found on GitHub currently.