A path traversal vulnerability in Yodinfo Mini Mouse 9.2.0 allows unauthenticated attackers to perform unauthorized file system access, posing a severe risk to system confidentiality.

The application is susceptible to a path traversal flaw (CWE-22) in its file handling logic. An unauthenticated attacker can exploit this by sending malicious HTTP GET or POST requests to the web interface, allowing them to bypass directory restrictions and retrieve sensitive system files or enumerate contents of arbitrary directories.

Successful exploitation of this vulnerability grants an attacker unauthorized access to the underlying file system of the host machine. This could lead to the exposure of sensitive configuration files, user data, or system credentials, potentially facilitating further compromise or lateral movement within the network. Given the CVSS score of 7.5, this high-severity flaw represents a significant risk to data integrity and organizational security.

Immediate Action: As no official patch is currently identified, users should restrict network access to the Mini Mouse web interface by placing it behind a VPN or firewall, ensuring it is not exposed to the public internet.

Proactive Monitoring: Security teams should audit web server access logs for anomalous requests containing path traversal patterns, such as ".." sequences, or unexpected calls to the "get_file_list" function.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules specifically configured to block directory traversal attempts and filter requests containing suspicious path parameters.

Public Exploit Available: Yes, a published proof-of-concept exploit exists, as detailed in the Exploit-DB entry 49744.

The presence of a functional proof-of-concept exploit makes this vulnerability a credible threat that requires immediate attention. Organizations currently utilizing Mini Mouse 9.2.0 must prioritize isolating the application from external access until a vendor-supplied security update becomes available to resolve the underlying path traversal mechanism.