Remote Code Execution Vulnerability in Emote Remote Mouse Software
CVE-2021-27573

9.8CRITICAL

Key Information:

Vendor

Remotemouse

Status
Emote Remote Mouse
Vendor
CVE Published:
7 May 2021

What is CVE-2021-27573?

An important security vulnerability exists in Emote Remote Mouse versions up to 4.0.0.0 that allows remote unauthenticated users to execute arbitrary code. This can be achieved by sending specially crafted UDP packets to the affected system, exposing it to unauthorized control without prior authentication. Users are advised to ensure their systems are updated and protected against potential exploitation of this vulnerability.

References

https://remotemouse.net/blog/
x_refsource_MISC
https://axelp.io/MouseTrap
x_refsource_MISC

EPSS Score

55% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.