CVE-2021-35448

Katalog CVE

CVSS 7.8 · High EPSS 1,0%

Kerentanan Improper Privilege Management pada remotemouse emote interactive studio. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

Emote Interactive Remote Mouse 3.008 on Windows allows attackers to execute arbitrary programs as Administrator by using the Image Transfer Folder feature to navigate to cmd.exe. It binds to local ports to listen for incoming connections.

Rincian

Terbit di NVD

24 Juni 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-269: Improper Privilege Management

EPSS (30 hari)

1,0% peluang dieksploitasi; lebih tinggi dari 63,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://deathflash.ml/blog/remote-mouse-lpe exploit · advisory pihak ketiga
• https://leobreaker1411.github.io/blog/cve-2021-35448 exploit · advisory pihak ketiga
• https://www.exploit-db.com/exploits/50047 exploit · advisory pihak ketiga · vdb entry