Exploitation Summary
EIP tracks 1 public exploit for CVE-2021-47804. PoCs published by Julio Aviña.
AI-analyzed exploit summary This is a writeup describing an unquoted service path vulnerability in Wise Care 365 5.6.7.568. The vulnerability allows local privilege escalation by inserting an executable into the service path, which runs with elevated privileges upon service or system restart.
Description
Wise Care 365 5.6.7.568 contains an unquoted service path vulnerability in the WiseBootAssistant service running with LocalSystem privileges. Attackers can exploit this by inserting a malicious executable in the service path, which will execute with elevated system privileges when the service restarts.
Exploits (1)
This is a writeup describing an unquoted service path vulnerability in Wise Care 365 5.6.7.568. The vulnerability allows local privilege escalation by inserting an executable into the service path, which runs with elevated privileges upon service or system restart.
References (3)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H