Vulnerability CVE-2021-27570

Vulnerability CVE-2021-27570

Published: 2021-05-07

Description:

An issue was discovered in Emote Remote Mouse through 3.015. Attackers can close any running process by sending the process name in a specially crafted packet. This information is sent in cleartext and is not protected by any authentication logic.

Type:

CWE-862

(Missing Authorization)

CVSS2 => (AV:N/AC:L/Au:N/C:N/I:N/A:P)

CVSS Base Score	Impact Subscore	Exploitability Subscore
5/10	2.9/10	10/10

Exploit range	Attack complexity	Authentication
Remote	Low	No required
Confidentiality impact	Integrity impact	Availability impact
None	None	Partial

Affected software
Remotemouse -> Emote remote mouse

References:

https://axelp.io/MouseTrap

https://remotemouse.net/blog/

Copyright 2024, cxsecurity.com