Executive Summary

CVE-2021-47849 is a Local File Inclusion (LFI) and path traversal vulnerability in Mini Mouse version 9.3.0. It allows attackers to manipulate file path parameters in API requests to access and retrieve file listings and contents from sensitive system directories such as /usr, /etc, and /var. This happens because the application does not properly sanitize input paths, enabling attackers to bypass restrictions and read arbitrary files on the device, including system and user data outside the app's sandbox. [1, 3]

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can lead to unauthorized disclosure of sensitive system and user files on devices running the vulnerable Mini Mouse app. Attackers can access critical system directories and files, such as /etc/passwd, which may reveal user accounts and system configuration. This information disclosure can facilitate further attacks by exposing confidential data and system details, compromising the confidentiality of the device. [1, 3]

Useful 0 Not Useful 0

Detection Guidance

This vulnerability can be detected by sending crafted HTTP requests to the Mini Mouse app's local server interface, which listens on port 8039. For example, you can send a GET request to `/op=get_device_info` to retrieve device information, or a POST request to `/op=get_file_list` with a JSON payload specifying directory paths like `/usr`, `/etc`, or `/var` to check if file listings are returned. Additionally, sending a GET request to `/file=` with a path parameter (e.g., `/etc/passwd`) can test if arbitrary files can be read. These requests can be performed using tools like curl or any HTTP client. Example commands: 1. `curl -X GET http://<device_ip>:8039/op=get_device_info` 2. `curl -X POST http://<device_ip>:8039/op=get_file_list -H 'Content-Type: application/json' -d '{"path":"/etc"}'` 3. `curl -X GET http://<device_ip>:8039/file=/etc/passwd` If these requests return sensitive file information or directory listings, the vulnerability is present. [1, 3]

Useful 0 Not Useful 0

Mitigation Strategies

Immediate mitigation steps include disabling or restricting access to the Mini Mouse app's local server interface on port 8039 to prevent unauthorized API requests. Ensure that the app is updated to a version where this vulnerability is patched, if available. If an update is not available, restrict network access to the device running the app, especially from untrusted networks. Additionally, monitor network traffic for suspicious requests targeting the vulnerable endpoints and consider implementing firewall rules to block such traffic. [1, 3]

Useful 0 Not Useful 0