CVE-2021-47862highCWE-428

CVE-2021-47862: high-severity vulnerability in HI-REZ STUDIOS HiPatchService

Hi-Rez Studios 5.1.6.3 - 'HiPatchService' Unquoted Service Path

Published · Updated

Follow this CVE+ Monitor HiPatchService

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.5epss 0.2%
Hi-Rez Studios 5.1.6.3 contains an unquoted service path vulnerability in the HiPatchService that allows local attackers to execute code with elevated privileges. Attackers can exploit the unquoted path during system startup or reboot to inject and run malicious executables with LocalSystem permissions.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
HI-REZ STUDIOS · HiPatchService