CVE-2021-47851

Mini Mouse 9.2.0 - Remote Code Execution

CVSS 9.3 CRITICALEPSS 1.0%CWE-78

Mini Mouse 9.2.0 contains a remote code execution vulnerability that allows attackers to execute arbitrary commands through an unauthenticated HTTP endpoint. Attackers can leverage the /op=command endpoint to download and execute payloads by sending crafted JSON requests with malicious script commands.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected products

Yodinfo · Mini Mouse

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/49743unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://apps.apple.com/us/app/mini-mouse-remote-control/id914250948 https://www.exploit-db.com/exploits/49743 https://www.vulncheck.com/advisories/mini-mouse-remote-code-execution