Description
Mini Mouse 9.2.0 contains a remote code execution vulnerability that allows attackers to execute arbitrary commands through an unauthenticated HTTP endpoint. Attackers can leverage the /op=command endpoint to download and execute payloads by sending crafted JSON requests with malicious script commands.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Yodinfo | Mini Mouse | 9.2.0 | — |
References
- ExploitDB-49743 exploit
- Mini Mouse Apple Store product
- VulnCheck Advisory: Mini Mouse 9.2.0 - Remote Code Execution third-party-advisory