CVE-2021-47833highCWE-428

CVE-2021-47833: fallo de gravedad alta en Gearboxcomputers WifiHotSpot

WifiHotSpot 1.0.0.0 - 'WifiHotSpotService.exe' Unquoted Service Path

Publicada el

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 8.5epss 0.2%
probabilidad de explotación
0.2%top 94% de las CVE
explotación observada
noninguna fuente lo reporta
WifiHotSpot 1.0.0.0 contains an unquoted service path vulnerability in its WifiHotSpotService.exe that allows local attackers to execute code with elevated privileges. Attackers can exploit the unquoted path during system startup or reboot to inject and run malicious executables with LocalSystem permissions.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
Gearboxcomputers · WifiHotSpot
Referencias
https://wifi-hotspot.gearboxcomputers.com/https://www.exploit-db.com/exploits/49845https://www.vulncheck.com/advisories/wifihotspot-wifihotspotserviceexe-unquoted-service-path