PT-2021-17513 · Unknown · Emote Remote Mouse

Axel Persinger · Published 2021-05-07 · Updated 2022-07-12 · CVE-2021-27571

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Emote Remote Mouse versions through 4.0.0.0

Description An issue allows attackers to retrieve recently used and running applications, their icons, and their file paths. This information is sent in cleartext and lacks authentication logic.

Recommendations For Emote Remote Mouse versions through 4.0.0.0, consider restricting access to sensitive application data until a patch is available. As a temporary workaround, avoid using the application for sensitive tasks until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2021-27571

Affected Products

Emote Remote Mouse

References · 4

• 🔥 https://axelp.io/MouseTrap · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-27571 · Security Note
• https://osv.dev/vulnerability/CVE-2021-27571 · Vendor Advisory
• https://remotemouse.net/blog · Note