PT-2026-3048 · Dynojet · Dynojet Power Core

CVE-2021-47773 · Publicado 2026-01-15 · Atualizado 2026-01-15

Positive Technologies (AI Summary)

CVSS v4.0

8.5

Alta

Vetor base

AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Dynojet Power Core version 2.3.0

Description The software contains an unquoted service path issue within the DJ.UpdateService. This allows local authenticated users to potentially execute code with elevated privileges. An attacker can exploit the unquoted binary path by placing malicious executables in the service's file path, potentially gaining Local System access.

Recommendations Ensure the service path is properly quoted to prevent the execution of unauthorized code.

Exploit

Correção

Enumeração de Fraquezas

CWE-428

Identificadores relacionados

CVE-2021-47773

Produtos afetados

Dynojet Power Core

Referências · 5

• 🔥 https://exploit-db.com/exploits/50466 · Exploit
• https://osv.dev/vulnerability/CVE-2021-47773 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2021-47773 · Nota de Segurança
• https://dynojet.com · Nota
• https://twitter.com/CVEnew/status/2011926096774942895 · Publicação no Twitter