Emote Interactive Remote Mouse 3.008 on Windows allows attackers to execute arbitrary programs as Administrator by using the Image Transfer Folder feature to navigate to cmd.exe. It binds to local ports to listen for incoming connections.
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
| Link | Tags |
|---|---|
| https://deathflash.ml/blog/remote-mouse-lpe | third party advisory exploit |
| https://www.exploit-db.com/exploits/50047 | exploit vdb entry third party advisory |
| https://leobreaker1411.github.io/blog/cve-2021-35448 | third party advisory exploit |