PT-2021-17511 · Unknown · Emote Remote Mouse

Axel Persinger · Published 2021-05-07 · Updated 2022-07-12 · CVE-2021-27569

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Emote Remote Mouse versions through 4.0.0.0

Description An issue allows attackers to maximize or minimize the window of a running process by sending the process name in a crafted packet. The information is sent in cleartext and lacks authentication logic.

Recommendations For versions through 4.0.0.0, consider restricting access to the process name information to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Cleartext Transmission of Sensitive Information

Missing Authentication

Weakness Enumeration

CWE-319

CWE-306

Related Identifiers

CVE-2021-27569

Affected Products

Emote Remote Mouse

References · 4

• 🔥 https://axelp.io/MouseTrap · Exploit
• https://osv.dev/vulnerability/CVE-2021-27569 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-27569 · Security Note
• https://remotemouse.net/blog · Note