Unified Remote 3.9.0.2463 is vulnerable to unauthenticated remote code execution, allowing attackers to take full control of the host system.

The application lacks proper authentication for critical functions (CWE-306). By sending specially crafted network packets to port 9512, an unauthenticated, remote attacker can trigger command execution on the underlying host.

This is a critical vulnerability that allows for complete system compromise, including the potential for data exfiltration, malware installation, and long-term persistence. With a CVSS score of 9.8, the ability for an unauthenticated attacker to execute arbitrary commands poses an immediate threat to the entire network segment where the software is deployed.

Immediate Action: Update Unified Remote to the latest available version provided by the vendor. If an update is not immediately available, disable the service or restrict network access to port 9512 to trusted internal segments only.

Proactive Monitoring: Monitor network traffic for unusual payloads targeting port 9512 and audit system logs for unexpected command execution or process creation.

Compensating Controls: Utilize a firewall to strictly control ingress traffic to the service port, ensuring only authorized management workstations can communicate with the application.

Public Exploit Available: Yes — ExploitDB (ID 49587)

The presence of a public exploit combined with the ease of remote code execution makes this a high-urgency issue. Immediate remediation or network isolation is required to prevent potential compromise of systems running the affected version.