VulnerabilityModified
CVE-2021-27570
An issue was discovered in Emote Remote Mouse through 3.015.
MEDIUM 5.3EPSS 1.39%
Does this matter?
Lower severity and a low EPSS score (1.39%). Track it; it rarely justifies an emergency change on its own.
Description
An issue was discovered in Emote Remote Mouse through 3.015. Attackers can close any running process by sending the process name in a specially crafted packet. This information is sent in cleartext and is not protected by any authentication logic.
- CVSS 3.1
- 5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- EPSS
- 1.39% probability · 71th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-306
- Affected
- remotemouse/emote remote mouse
- Source
- cve@mitre.org
References
- https://axelp.io/MouseTrapExploit, Third Party Advisory
- https://remotemouse.net/blog/Product
- https://axelp.io/MouseTrapExploit, Third Party Advisory
- https://remotemouse.net/blog/Product
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.