{"api_version":"1","generated_at":"2026-07-23T16:44:56+00:00","cve":"CVE-2021-27572","urls":{"html":"https://cve.report/CVE-2021-27572","api":"https://cve.report/api/cve/CVE-2021-27572.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2021-27572","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2021-27572"},"summary":{"title":"CVE-2021-27572","description":"An issue was discovered in Emote Remote Mouse through 4.0.0.0. Authentication Bypass can occur via Packet Replay. Remote unauthenticated users can execute arbitrary code via crafted UDP packets even when passwords are set.","state":"PUBLIC","assigner":"cve@mitre.org","published_at":"2021-05-07 19:31:00","updated_at":"2021-05-17 17:38:00"},"problem_types":["CWE-294"],"metrics":[],"references":[{"url":"https://axelp.io/MouseTrap","name":"https://axelp.io/MouseTrap","refsource":"MISC","tags":[],"title":"Mouse Trap | Axel Persinger’s Blog","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://remotemouse.net/blog/","name":"https://remotemouse.net/blog/","refsource":"MISC","tags":[],"title":"Remote Mouse – News & Tips – Turn your mobile phone or tablet into a set of wireless mouse, keyboard and trackpad.","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-27572","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-27572","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2021","cve_id":"27572","vulnerable":"1","versionEndIncluding":"4.0.0.0","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"remotemouse","cpe5":"emote_remote_mouse","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2021","cve_id":"27572","vulnerable":"1","versionEndIncluding":"4.0.0.0:","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"remotemouse","cpe5":"emote_remote_mouse","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2021-27572","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"An issue was discovered in Emote Remote Mouse through 4.0.0.0. Authentication Bypass can occur via Packet Replay. Remote unauthenticated users can execute arbitrary code via crafted UDP packets even when passwords are set."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"url":"https://remotemouse.net/blog/","refsource":"MISC","name":"https://remotemouse.net/blog/"},{"refsource":"MISC","name":"https://axelp.io/MouseTrap","url":"https://axelp.io/MouseTrap"}]}},"nvd":{"publishedDate":"2021-05-07 19:31:00","lastModifiedDate":"2021-05-17 17:38:00","problem_types":["CWE-294"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.1,"baseSeverity":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9},"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"severity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:remotemouse:emote_remote_mouse:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.0.0","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2021","CveId":"27572","Ordinal":"202680","Title":"CVE-2021-27572","CVE":"CVE-2021-27572","Year":"2021"},"notes":[{"CveYear":"2021","CveId":"27572","Ordinal":"1","NoteData":"An issue was discovered in Emote Remote Mouse through 4.0.0.0. Authentication Bypass can occur via Packet Replay. Remote unauthenticated users can execute arbitrary code via crafted UDP packets even when passwords are set.","Type":"Description","Title":null},{"CveYear":"2021","CveId":"27572","Ordinal":"2","NoteData":"2021-05-07","Type":"Other","Title":"Published"},{"CveYear":"2021","CveId":"27572","Ordinal":"3","NoteData":"2021-05-07","Type":"Other","Title":"Modified"}]}}}