header-logo
Suggest Exploit
vendor:
Remote Mouse GUI
by:
Salman Asad (@deathflash1411) a.k.a LeoBreaker
N/A
CVSS
HIGH
Local Privilege Escalation
35448
CWE
Product Name: Remote Mouse GUI
Affected Version From: Remote Mouse 3.008
Affected Version To: Remote Mouse 3.008
Patch Exists: NO
Related CWE: CVE-2021-35448
CPE: a:remote_mouse:remote_mouse:3.008
Metasploit: https://www.rapid7.com/db/vulnerabilities/oracle_linux-cve-2020-35448/, https://www.rapid7.com/db/vulnerabilities/alma_linux-cve-2020-35448/, https://www.rapid7.com/db/vulnerabilities/redhat_linux-cve-2020-35448/, https://www.rapid7.com/db/vulnerabilities/amazon-linux-ami-2-cve-2020-35448/, https://www.rapid7.com/db/vulnerabilities/centos_linux-cve-2020-35448/
Other Scripts: https://www.infosecmatter.com/nessus-plugin-library/?id=157479, https://www.infosecmatter.com/nessus-plugin-library/?id=155155, https://www.infosecmatter.com/nessus-plugin-library/?id=155362, https://www.infosecmatter.com/nessus-plugin-library/?id=154921, https://www.infosecmatter.com/nessus-plugin-library/?id=154861, https://www.infosecmatter.com/nessus-plugin-library/?id=157002
Platforms Tested: Windows 10 Pro Version 21H1
2021

Remote Mouse GUI 3.008 – Local Privilege Escalation

This exploit allows an attacker to escalate their privileges locally on the system by exploiting a vulnerability in Remote Mouse GUI 3.008. By following the steps mentioned, the attacker can spawn a new command prompt with Administrator privileges.

Mitigation:

The vendor should release a patch to fix this vulnerability. In the meantime, users can avoid this exploit by not running Remote Mouse with administrative privileges.
Source

Exploit-DB raw data:

# Exploit Title: Remote Mouse GUI 3.008 - Local Privilege Escalation
# Exploit Author: Salman Asad (@deathflash1411) a.k.a LeoBreaker
# Date: 17.06.2021
# Version: Remote Mouse 3.008
# Tested on: Windows 10 Pro Version 21H1
# Reference: https://deathflash1411.github.io/blog/cve-2021-35448
# CVE: CVE-2021-35448

Steps to reproduce:

1. Open Remote Mouse from the system tray
2. Go to "Settings"
3. Click "Change..." in "Image Transfer Folder" section
4. "Save As" prompt will appear
5. Enter "C:\Windows\System32\cmd.exe" in the address bar
6. A new command prompt is spawned with Administrator privileges

Navigation

Suggest Exploit

Services By CQR