CVE-2023-31902

The advisory is blunt: Mobile Mouse 3.6.0.4 has a remote code execution flaw, reachable over the network with no authentication and no user interaction. Mobile Mouse turns a phone into a remote keyboard and mouse for a desktop, which means the desktop runs a listening service that accepts input commands — and this bug lets an unauthenticated network peer turn that service into arbitrary code execution on the machine it controls.

The public data is thin — no CWE, no technique detail — so we won't dramatize a mechanism we can't see. What we can reason about is exposure: this is consumer remote-control software, typically installed on desktops and laptops that sit on home or office LANs, sometimes on Wi-Fi that guests or other tenants share. An unauthenticated RCE on such a listener is the kind of thing that gets weaponized once a working exploit circulates, and the service is on precisely so it can be reached.

For us the deciding factor is where it's installed and how reachable that listener is. Mobile Mouse rarely belongs on a managed server, so the real work is endpoint discovery — is this app present on any corporate machine, and is its port reachable from anything untrusted? Where it turns up, the answer is removal or network isolation, not waiting on a sparse advisory to grow detail.