CVE-2021-47869: falha de alta gravidade em Brother Industries, Ltd. BRAdmin Professional
BRAdmin Professional 3.75 - 'BRA_Scheduler' Unquoted Service Path
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.5epss 0.2%
Brother BRAdmin Professional 3.75 contains an unquoted service path vulnerability in the BRA_Scheduler service that allows local users to potentially execute arbitrary code. Attackers can place a malicious executable named 'BRAdmin' in the C:\Program Files (x86)\Brother\ directory to gain local system privileges.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
Brother Industries, Ltd. · BRAdmin ProfessionalReferências
https://docs.unsafe-inline.com/0day/bradmin-professional-3.75-unquoted-service-pathhttps://global.brother/https://support.brother.com/g/b/downloadend.aspx?c=us&lang=en&prod=hls7000dn_us_eu_as&os=10013&dlid=dlf005042_000&flang=4&type3=26https://www.exploit-db.com/exploits/49671https://www.vulncheck.com/advisories/bradmin-professional-brascheduler-unquoted-service-path