CVE-2023-31902

published 2023-05-17

CVE-2023-31902: RPA Technology Mobile Mouse 3.6.0.4 is vulnerable to Remote Code Execution (RCE).

Priority P2 69 critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

EXPLOIT

RPA Technology Mobile Mouse 3.6.0.4 is vulnerable to Remote Code Execution (RCE).

Affected

1 ranges

Vendor	Product	Version range	Fixed in
mobilemouse	mobile_mouse	—	—

Detection & IOCs extracted from sources · hover to see the quote

version Mobile Mouse Server 3.6.0.4↗

• → Mobile Mouse Server running without a password (default configuration) is exploitable for unauthenticated RCE; detect unauthenticated connections to the Mobile Mouse Server port as a potential exploitation attempt. ↗
• → A Metasploit module exists for this CVE targeting Windows hosts running Mobile Mouse Server; monitor for exploit framework traffic patterns against the Mobile Mouse Server service. ↗

• · Exploitation requires the Mobile Mouse Server to be configured without a password, which is the default setting; servers with a password set are not vulnerable to this attack vector. ↗

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.