CVE-2021-47847

HIGH

Disk Sorter Server 13.6.12 - Code Injection

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2021-47847. PoCs published by BRushiran.

AI-analyzed exploit summary This is a writeup detailing an unquoted service path vulnerability in Disk Sorter Server 13.6.12. The vulnerability allows local privilege escalation due to the service path containing spaces and not being enclosed in quotes.

Description

Disk Sorter Server 13.6.12 contains an unquoted service path vulnerability in its binary path configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files\Disk Sorter Server\bin\disksrs.exe' to inject malicious executables and escalate privileges.

Exploits (1)

exploitdb WRITEUP
by BRushiran · textlocalwindows
https://www.exploit-db.com/exploits/50013

This is a writeup detailing an unquoted service path vulnerability in Disk Sorter Server 13.6.12. The vulnerability allows local privilege escalation due to the service path containing spaces and not being enclosed in quotes.

Classification
Writeup 90%
Attack Type
Lpe
Complexity
Trivial
Reliability
Reliable
Target: Disk Sorter Server 13.6.12
Auth required
Prerequisites: Local access to the system · Ability to write to the directory containing the executable
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3
Core References
Exploit, Third Party Advisory exploit
https://www.exploit-db.com/exploits/50013
Various Sources product
https://www.disksorter.com

Scores

CVSS v3 7.8
EPSS 0.0015
EPSS Percentile 4.8%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-428
Status published
Published Jan 16, 2026
Tracked Since Feb 18, 2026