CVE-2021-47851 — AI Deep Analysis Summary

🚨 **Essence**: Remote Code Execution (RCE) via OS Command Injection. 💥 **Consequences**: Attackers can execute arbitrary commands on the target device, leading to full system compromise.

🛡️ **Root Cause**: **CWE-78** (OS Command Injection). The flaw lies in an **unauthenticated HTTP endpoint** that fails to sanitize inputs, allowing shell commands to be injected.

📱 **Affected**: **Yodinfo Mini Mouse**. Specifically **Version 9.2.0**. It is a mobile remote control app by Yodinfo. 📉 **Scope**: iOS users via Apple Store.

👑 **Privileges**: **High**. CVSS Score indicates **Complete** impact on Confidentiality, Integrity, and Availability. Hackers gain **full control** over the device's OS.

🔓 **Threshold**: **Very Low**. **No Authentication** required. **No User Interaction** needed. Network Accessible (AV:N). Easy to exploit remotely.

💣 **Public Exploit**: **YES**. ExploitDB ID **49743** is available. Wild exploitation is possible given the low barrier to entry.

🔍 **Self-Check**: Scan for **Yodinfo Mini Mouse** services. Look for the specific **HTTP endpoint** vulnerable to command injection. Check if the app version is **9.2.0**.

🩹 **Fix**: Update to the latest version from the **Apple Store**. The vendor (Yodinfo) is responsible for the patch. Check for official advisories.

🚧 **Workaround**: **Disable** the app if not in use. **Block** network access to the app's remote control endpoints via firewall. **Uninstall** if unnecessary.

🔥 **Urgency**: **CRITICAL**. CVSS Vector shows **High** severity (9.8+ implied by H/I/H). No auth needed. Immediate patching or mitigation required.