Emote Interactive Remote Mouse 3.008 on Windows allows attackers to execute arbitrary programs as Administrator by using the Image Transfer Folder feature to navigate to cmd.exe. It binds to local ports to listen for incoming connections.
References
| Link | Resource |
|---|---|
| https://deathflash.ml/blog/remote-mouse-lpe | Exploit Third Party Advisory |
| https://leobreaker1411.github.io/blog/cve-2021-35448 | Exploit Third Party Advisory |
| https://www.exploit-db.com/exploits/50047 | Exploit Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
| AND |
|
History
29 Mar 2022, 19:36
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://leobreaker1411.github.io/blog/cve-2021-35448 - Exploit, Third Party Advisory |
29 Dec 2021, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
01 Jul 2021, 14:29
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://www.exploit-db.com/exploits/50047 - Exploit, Third Party Advisory, VDB Entry | |
| References | (MISC) https://deathflash.ml/blog/remote-mouse-lpe - Exploit, Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : 7.2
v3 : 7.8 |
| CPE | cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* cpe:2.3:a:remotemouse:emote_interactive_studio:3.008:*:*:*:*:*:*:* |
|
| CWE | CWE-269 |
24 Jun 2021, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-06-24 20:15
Updated : 2024-02-04 21:47
NVD link : CVE-2021-35448
Mitre link : CVE-2021-35448
CVE.ORG link : CVE-2021-35448
JSON object : View
Products Affected
remotemouse
- emote_interactive_studio
microsoft
- windows
CWE
CWE-269
Improper Privilege Management