PT-2026-3164 · Unknown · Remote Mouse

Published 2026-01-15 · Updated 2026-01-21 · CVE-2021-47792

Positive Technologies (AI Summary)

CVSS v4.0

8.5

High

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Remote Mouse version 4.002

Description The software contains an unquoted service path, allowing local attackers to execute arbitrary code with elevated system privileges. Specifically, the unquoted service path in the RemoteMouseService can be exploited to inject malicious executables and gain administrative access.

Recommendations Update to a newer version that addresses the unquoted service path issue. As a temporary workaround, consider modifying the service path to include quotes to prevent malicious code execution.

Exploit

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2021-47792

Affected Products

Remote Mouse

References · 7

• 🔥 https://exploit-db.com/exploits/50258 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-47792 · Security Note
• https://osv.dev/vulnerability/CVE-2021-47792 · Vendor Advisory
• https://twitter.com/CVEnew/status/2012126498279268838 · Twitter Post
• https://remotemouse.net · Note
• https://twitter.com/cracbot/status/2013929633897734182 · Twitter Post
• https://vulncheck.com/advisories/remote-mouse-unquoted-service-path · Note