PT-2021-17514 · Unknown · Emote Remote Mouse

Axel Persinger · Published 2021-05-07 · Updated 2021-05-17 · CVE-2021-27572

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Emote Remote Mouse versions prior to 4.0.0.1

Description An issue in Emote Remote Mouse allows Authentication Bypass via Packet Replay. Remote unauthenticated users can execute arbitrary code by sending crafted UDP packets, even when passwords are set.

Recommendations For Emote Remote Mouse versions prior to 4.0.0.1, update to version 4.0.0.1 or later to resolve the issue.

Exploit

Fix

Weakness Enumeration

CWE-294

Related Identifiers

CVE-2021-27572

Affected Products

Emote Remote Mouse

References · 4

• 🔥 https://axelp.io/MouseTrap · Exploit
• https://osv.dev/vulnerability/CVE-2021-27572 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-27572 · Security Note
• https://remotemouse.net/blog · Note