Safe Remote Mouse for Windows 10 Reddit: A Review of its Security Flaws

In February 2021, a security researcher named Persinger reported several vulnerabilities in the popular remote mouse software, Safe Remote Mouse for Windows 10. The flaws were discovered after Persinger attempted to contact the vendor, but unfortunately, he never received a response. As a result, he was forced to publicly reveal the bugs following the 90-day disclosure deadline.

The six security flaws identified by Persinger are:

1. CVE-2021-27574: This vulnerability allows an attacker to conduct a software supply-chain attack by exploiting the app's use of cleartext HTTP for updates. This could result in a scenario where a victim downloads a malicious binary instead of the real update.

2. CVE-2021-27573: This flaw enables an attacker to execute arbitrary code via crafted UDP packets without prior authorization or authentication.

3. CVE-2021-27572: This vulnerability allows remote unauthenticated users to execute arbitrary code via packet replay, even when passwords are set.

4. CVE-2021-27571: The app is vulnerable to information disclosure, allowing an attacker to retrieve recently used and running applications, their icons, and file paths.

5. CVE-2021-27570: This flaw enables an attacker to close any running process by sending the process name in a specially crafted packet.

6. CVE-2021-27569: The app is also vulnerable to window manipulation, allowing an attacker to maximize or minimize the window of a running process by sending the process name in a crafted packet.

It's essential for Safe Remote Mouse for Windows 10 users to be aware of these security flaws and take necessary precautions to protect their systems. While it's unclear what measures the vendor will take to address these issues, it's crucial that they prioritize fixing these vulnerabilities to ensure the security of their users' data and systems.

Safe remote mouse for windows 10 reddit