by Kastro
Paper/Archive/CVE-2025-66576

CVE-2025-66576

Remotecontrolio Remote Keyboard Desktop — Remote Keyboard Desktop 1.0.1 - Remote Code Execution (RCE)

EPSS 1%public exploitCVSS 9.8
critical.is priorityof 100
53
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 69.4.694 × 2013.9Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

Remote Keyboard Desktop 1.0.1 enables remote attackers to execute system commands via the rundll32.exe exported function export, allowing unauthenticated code execution.

Affected

ProductAffectedFixed inSource
Remote Keyboard Desktop1.0.1–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
VulnCheck (CNA)8.9CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

exploitexploit-db.com/exploits/52299refremotecontrolio.web.apprefapps.microsoft.com/detail/9n0jw8v5sc9m?hl=neutral&gl=US&ocid=pdpsharewriteupvulncheck.com/advisories/remote-keyboard-desktop-101-remote-code-execution-rce