CVE-2021-47792
Published: 16 January 2026
Summary
CVE-2021-47792 is a high-severity Unquoted Search Path or Element (CWE-428) vulnerability in Remotemouse Remote Mouse. Its CVSS base score is 8.5 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Path Interception by Unquoted Path (T1574.009); ranked at the 10.4th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 CM-6 (Configuration Settings) and SA-6 (Software Usage Restrictions).
Deeper analysis
CVE-2021-47792 is an unquoted service path vulnerability in Remote Mouse version 4.002, specifically affecting the RemoteMouseService component. This flaw, classified under CWE-428, allows local attackers to execute arbitrary code with elevated system privileges by exploiting the unquoted path in the service configuration. The vulnerability carries a CVSS v3.1 base score of 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) and was published on 2026-01-16.
Local attackers with low privileges can exploit this vulnerability to inject malicious executables into the service path, leading to arbitrary code execution under SYSTEM privileges and full administrative access on the affected Windows system. The attack requires local access but no user interaction, making it straightforward for compromised low-privilege accounts to escalate privileges.
Advisories and references, including a VulnCheck advisory at https://www.vulncheck.com/advisories/remote-mouse-unquoted-service-path and an exploit PoC at https://www.exploit-db.com/exploits/50258, document the issue in detail. The vendor site at https://www.remotemouse.net/ provides software context, though specific patch or mitigation guidance is not detailed in the available information.
A public exploit is available on Exploit-DB, indicating proof-of-concept exploitation capability.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2026-3018
Vulnerability details
Remote Mouse 4.002 contains an unquoted service path vulnerability that allows local attackers to execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted service path in the RemoteMouseService to inject malicious executables and gain administrative access.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Direct match to unquoted service path enabling path interception for privilege escalation to SYSTEM.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Enforces secure configuration settings for the RemoteMouseService executable path, ensuring it is properly quoted to directly prevent exploitation of the unquoted service path vulnerability.
Requires identification, reporting, and correction of the specific unquoted service path flaw in RemoteMouseService, including patching or configuration fixes for CVE-2021-47792.
Restricts execution to only authorized software via deny-all/permit-by-exception policy, blocking malicious executables injected into the unquoted service path from running with elevated privileges.