PT-2026-3284 · Unknown · Bootpturbo

Erick Galindo · Publicado 2026-01-16 · Atualizado 2026-01-17 · CVE-2021-47828

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions BOOTP Turbo version 2.0.0.1253

Description BOOTP Turbo version 2.0.0.1253 contains an unquoted service path vulnerability in its Windows service configuration. An attacker can exploit the unquoted path to execute arbitrary code with elevated LocalSystem privileges during system startup or reboot.

Recommendations Ensure the service path is enclosed in quotes during the Windows service configuration.

Exploit

Correção

Enumeração de Fraquezas

CWE-428

Identificadores relacionados

CVE-2021-47828

Produtos afetados

Bootpturbo

Referências · 6

• 🔥 https://exploit-db.com/exploits/49851 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-47828 · Nota de Segurança
• https://vulncheck.com/advisories/bootp-turbo-bootptexe-unquoted-service-path · Nota
• https://twitter.com/CVEnew/status/2012303215635873867 · Publicação no Twitter
• https://twitter.com/RedPacketSec/status/2012332019313701225 · Publicação no Twitter
• https://weird-solutions.com · Nota