Description
Remote Keyboard Desktop 1.0.1 enables remote attackers to execute system commands via the rundll32.exe exported function export, allowing unauthenticated code execution.
Published: 2025-12-04
Score: 8.9 High
EPSS: < 1% Very Low
KEV: No
Impact: Remote Code Execution
Action: Immediate Patch
AI Analysis

Impact

Remote Keyboard Desktop 1.0.1 contains a flaw that lets an attacker execute arbitrary system commands without authentication. The deficiency lies in an exported function of rundll32.exe that can be invoked remotely, granting an attacker full control over the affected Windows machine and compromising confidentiality, integrity, and availability.

Affected Systems

The vulnerability affects Remotecontrolio Remote Keyboard Desktop version 1.0.1 running on Windows. No other versions or platforms are mentioned.

Risk and Exploitability

The CVSS score of 8.9 indicates a high severity. The EPSS score is less than 1%, indicating that exploitation attempts are currently very rare. The vulnerability is not listed in the CISA KEV catalog. Attackers can trigger the vulnerable export without credentials, making remote code execution possible from any network that can reach the target.

Generated by OpenCVE AI on April 22, 2026 at 20:57 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade Remote Keyboard Desktop to the latest patched release that removes the vulnerable rundll32.exe export.
  • If a patch is not available, uninstall the application or block its execution using a Local Group Policy or AppLocker rule to prevent the exposed export from being called.
  • Apply network segmentation or firewall rules to block remote access to the device, reducing the possibility of the vulnerable function being invoked from external locations.

Generated by OpenCVE AI on April 22, 2026 at 20:57 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 17 Dec 2025 16:30:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:a:remotecontrolio:remote_keyboard_desktop:1.0.1:*:*:*:*:windows:*:*
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

Fri, 05 Dec 2025 18:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Fri, 05 Dec 2025 11:00:00 +0000

Type Values Removed Values Added
First Time appeared Remotecontrolio
Remotecontrolio remote Keyboard Desktop
Vendors & Products Remotecontrolio
Remotecontrolio remote Keyboard Desktop

Thu, 04 Dec 2025 21:00:00 +0000

Type Values Removed Values Added
Description Remote Keyboard Desktop 1.0.1 enables remote attackers to execute system commands via the rundll32.exe exported function export, allowing unauthenticated code execution.
Title Remote Keyboard Desktop 1.0.1 - Remote Code Execution (RCE)
Weaknesses CWE-78
References
Metrics cvssV4_0

{'score': 8.9, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Remotecontrolio Remote Keyboard Desktop
cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published:

Updated: 2026-04-07T14:09:52.696Z

Reserved: 2025-12-04T16:31:05.556Z

Link: CVE-2025-66576

cve-icon Vulnrichment

Updated: 2025-12-05T17:42:12.305Z

cve-icon NVD

Status : Analyzed

Published: 2025-12-04T21:16:10.600

Modified: 2025-12-17T16:21:58.193

Link: CVE-2025-66576

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-04-22T21:00:06Z

Weaknesses