module
Wifi Mouse RCE
| Disclosed |
|---|
| Feb 25, 2021 |
Disclosed
Feb 25, 2021
Description
The WiFi Mouse (Mouse Server) from Necta LLC contains an auth bypass as the
authentication is completely implemented entirely on the client side. By utilizing
this vulnerability, is possible to open a program on the server
(cmd.exe in our case) and type commands that will be executed as the user running
WiFi Mouse (Mouse Server), resulting in remote code execution.
Tested against versions 1.8.3.4 (current as of module writing) and
1.8.2.3.
authentication is completely implemented entirely on the client side. By utilizing
this vulnerability, is possible to open a program on the server
(cmd.exe in our case) and type commands that will be executed as the user running
WiFi Mouse (Mouse Server), resulting in remote code execution.
Tested against versions 1.8.3.4 (current as of module writing) and
1.8.2.3.
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.