CVE-2021-47804highCWE-428

Wise Care 365 5.6.7.568 - 'WiseBootAssistant' Unquoted Service Path

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 8.5epss 0.2%

probabilidad de explotación

0.2%top 95% de las CVE

explotación observada

noninguna fuente lo reporta

Wise Care 365 5.6.7.568 contains an unquoted service path vulnerability in the WiseBootAssistant service running with LocalSystem privileges. Attackers can exploit this by inserting a malicious executable in the service path, which will execute with elevated system privileges when the service restarts.

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Productos afectados

Wisecleaner · Wise Care

Referencias

https://www.exploit-db.com/exploits/50038 https://www.vulncheck.com/advisories/wise-care-wisebootassistant-unquoted-service-path https://www.wisecleaner.com/wise-care-365.html