CVE-2021-47886
Pingzapper 2.3.1 - 'PingzapperSvc' Unquoted Service Path
Pingzapper 2.3.1 contains an unquoted service path vulnerability in the PingzapperSvc service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files (x86)\Pingzapper\PZService.exe' to inject malicious executables and escalate privileges.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
Fyrolabs LLC. · PingzapperQuer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →