PT-2026-3174 · Wisecleaner · Wise Care 365

Julio Aviña · Publicado 2026-01-15 · Atualizado 2026-01-16 · CVE-2021-47804

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Wise Care 365 version 5.6.7.568

Description The software contains an unquoted service path vulnerability within the WiseBootAssistant service, which operates with LocalSystem privileges. An attacker can leverage this by placing a malicious executable within the service path. Upon service restart, this executable will run with elevated system privileges.

Recommendations Apply appropriate quoting to the service path to prevent unauthorized execution of malicious files.

Exploit

Correção

Enumeração de Fraquezas

CWE-428

Identificadores relacionados

CVE-2021-47804

Produtos afetados

Wise Care 365

Referências · 5

• 🔥 https://exploit-db.com/exploits/50038 · Exploit
• https://vulncheck.com/advisories/wise-care-wisebootassistant-unquoted-service-path · Nota
• https://twitter.com/CVEnew/status/2012126488313598028 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2021-47804 · Nota de Segurança
• https://wisecleaner.com/wise-care-365.html · Nota