PT-2026-3285 · Unknown · Dhcp Broadband

Erick Galindo · Publicado 2026-01-16 · Atualizado 2026-01-17 · CVE-2021-47829

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions DHCP Broadband version 4.1.0.1503

Description The software contains an unquoted service path vulnerability in its service configuration. This allows local attackers to execute code with elevated privileges. The vulnerable path is located at 'C:Program FilesDHCP Broadband 4dhcpt.exe', enabling attackers to inject malicious code that executes during service startup with LocalSystem permissions.

Recommendations Apply appropriate quoting to the service path in the service configuration.

Exploit

Correção

Enumeração de Fraquezas

CWE-428

Identificadores relacionados

CVE-2021-47829

Produtos afetados

Dhcp Broadband

Referências · 6

• 🔥 https://exploit-db.com/exploits/49850 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-47829 · Nota de Segurança
• https://vulncheck.com/advisories/dhcp-broadband-dhcptexe-unquoted-service-path · Nota
• https://twitter.com/CVEnew/status/2012303214633435336 · Publicação no Twitter
• https://twitter.com/RedPacketSec/status/2012332020555272322 · Publicação no Twitter
• https://weird-solutions.com · Nota