A critical remote code execution vulnerability in Unified Remote allows attackers to execute arbitrary system commands by sending malicious packets to the service.

This vulnerability allows unauthenticated attackers to send specially crafted network packets to port 9512. This triggers the service to open a command prompt, enabling the attacker to download and execute arbitrary malicious payloads on the host system.

The CVSS score of 9.8 reflects the high risk of total system compromise. An attacker exploiting this flaw gains the ability to execute code with the permissions of the service, potentially leading to complete host takeover, installation of persistent backdoors, and unauthorized access to sensitive data stored on the host machine.

Immediate Action: Restrict access to port 9512 via host-based firewalls to prevent unauthorized network connections until a vendor patch is applied.

Proactive Monitoring: Monitor network traffic for unexpected connections to port 9512 and inspect system logs for unusual process execution or command shell activity.

Compensating Controls: Use network segmentation to ensure the affected service is not reachable from untrusted or public-facing networks.

Public Exploit Available: Unknown

The ability to execute arbitrary commands remotely makes this a critical security priority. Organizations should immediately isolate the affected systems from the network, particularly by blocking external access to the vulnerable port, and contact the vendor for the latest security updates to remediate the underlying code execution flaw.