Exploitation Summary
EIP tracks 1 public exploit for CVE-2021-47809. PoCs published by BRushiran.
AI-analyzed exploit summary This is a writeup detailing an unquoted service path vulnerability in Disk Sorter Enterprise 13.6.12. It provides steps to identify the vulnerability but does not include exploit code.
Description
Disk Sorter Enterprise 13.6.12 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files\Disk Sorter Enterprise\bin\disksrs.exe' to inject malicious executables and escalate privileges.
Exploits (1)
This is a writeup detailing an unquoted service path vulnerability in Disk Sorter Enterprise 13.6.12. It provides steps to identify the vulnerability but does not include exploit code.
References (3)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H