Description (CNA)
Due to a reliance on client-side authentication, the WiFi Mouse (Mouse Server) from Necta LLC's authentication mechanism is trivially bypassed, which can result in remote code execution.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Necta LLC / WiFi Mouse (Mouse Server) | affected 1.8.3.4 through 1.8.3.4; affected 1.8.2.3 through 1.8.2.3 |
CWE
CWE-603
References
- https://github.com/rapid7/metasploit-framework/pull/16985
- https://www.exploit-db.com/exploits/50972
- https://www.exploit-db.com/exploits/49601
- https://github.com/H4rk3nz0/PenTesting/blob/main/Exploits/wifi%20mouse/wifi-mouse-server-rce.py
- http://packetstormsecurity.com/files/168509/WiFi-Mouse-1.8.3.4-Remote-Code-Execution.html
ADP enrichment
No English description supplied.
- https://github.com/rapid7/metasploit-framework/pull/16985
- https://www.exploit-db.com/exploits/50972
- https://www.exploit-db.com/exploits/49601
- https://github.com/H4rk3nz0/PenTesting/blob/main/Exploits/wifi%20mouse/wifi-mouse-server-rce.py
- http://packetstormsecurity.com/files/168509/WiFi-Mouse-1.8.3.4-Remote-Code-Execution.html