{"id":"CVE-2021-47792","state":"PUBLISHED","title":"Remote Mouse 4.002 - Unquoted Service Path","description":"Remote Mouse 4.002 contains an unquoted service path vulnerability that allows local attackers to execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted service path in the RemoteMouseService to inject malicious executables and gain administrative access.","publishedAt":"2026-01-15T23:25:42.486Z","updatedAt":"2026-10-01T19:19:03.830Z","severity":{"score":8.5,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","source":"VulnCheck"},"assigner":"VulnCheck","products":["Remotemouse Remote Mouse"],"affected":[{"vendor":"Remotemouse","product":"Remote Mouse","versions":[{"version":"Remote Mouse 3.008 & 4.002","status":"affected"}]}],"references":["https://www.exploit-db.com/exploits/50258","https://www.remotemouse.net/","https://www.vulncheck.com/advisories/remote-mouse-unquoted-service-path"],"weaknesses":["CWE-428"],"ingestedAt":"2026-10-29T19:49:19.404Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2021/47xxx/CVE-2021-47792.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2021-47792","state":"PUBLISHED","datePublished":"2026-01-15T23:25:42.486Z","dateUpdated":"2026-10-01T19:19:03.830Z","assignerShortName":"VulnCheck","assignerOrgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateReserved":"2026-01-14T14:39:44.738Z"},"containers":{"cna":{"title":"Remote Mouse 4.002 - Unquoted Service Path","descriptions":[{"lang":"en","value":"Remote Mouse 4.002 contains an unquoted service path vulnerability that allows local attackers to execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted service path in the RemoteMouseService to inject malicious executables and gain administrative access."}],"affected":[{"vendor":"Remotemouse","product":"Remote Mouse","versions":[{"version":"Remote Mouse 3.008 & 4.002","status":"affected"}]}],"references":[{"url":"https://www.exploit-db.com/exploits/50258","name":"ExploitDB-50258","tags":["exploit"]},{"url":"https://www.remotemouse.net/","name":"Official Vendor Homepage","tags":["product"]},{"url":"https://www.vulncheck.com/advisories/remote-mouse-unquoted-service-path","name":"VulnCheck Advisory: Remote Mouse 4.002 - Unquoted Service Path","tags":["third-party-advisory"]}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","baseScore":8.5,"baseSeverity":"HIGH","exploitMaturity":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS"},{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"format":"CVSS"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-428","lang":"en","description":"Unquoted Search Path or Element","type":"CWE"}]}],"providerMetadata":{"shortName":"VulnCheck","orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateUpdated":"2026-10-01T19:19:03.830Z"},"datePublic":"2021-09-03T00:00:00.000Z","cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:remotemouse:emote_interactive_studio:3.008:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:remotemouse:emote_interactive_studio:4.002:*:*:*:*:*:*:*"}]}]}],"credits":[{"lang":"en","value":"Salman Asad (@deathflash1411) a.k.a LeoBreaker","type":"finder"}],"x_generator":{"engine":"vulncheck"}},"adp":[{"title":"CISA ADP Vulnrichment","references":[{"url":"https://www.exploit-db.com/exploits/50258","tags":["exploit"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-01-16T15:52:51.255040Z","id":"CVE-2021-47792","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-01-16T21:11:59.831Z"}}]}}}