Exploitation Summary
EIP tracks 1 public exploit for CVE-2021-35448. PoCs published by Salman Asad.
AI-analyzed exploit summary This exploit leverages a local privilege escalation vulnerability in Remote Mouse GUI 3.008 by manipulating the 'Image Transfer Folder' setting to spawn a command prompt with Administrator privileges. The attack involves bypassing the file dialog to execute arbitrary commands.
Description
Emote Interactive Remote Mouse 3.008 on Windows allows attackers to execute arbitrary programs as Administrator by using the Image Transfer Folder feature to navigate to cmd.exe. It binds to local ports to listen for incoming connections.
Exploits (1)
This exploit leverages a local privilege escalation vulnerability in Remote Mouse GUI 3.008 by manipulating the 'Image Transfer Folder' setting to spawn a command prompt with Administrator privileges. The attack involves bypassing the file dialog to execute arbitrary commands.
References (3)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H