PT-2026-3835 · Oki · Oki Local Port Manager+1

Brian Rodriguez · Publicado 2026-01-21 · Atualizado 2026-01-21 · CVE-2021-47884

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OKI Configuration Tool version 1.6.53

Description OKI Configuration Tool version 1.6.53 contains a flaw in the OKI Local Port Manager service related to an unquoted service path. This allows local attackers to potentially execute arbitrary code. The unquoted path is located at 'C:Program FilesOkidataCommonextend3portmgrsrv.exe', enabling attackers to inject malicious executables and escalate privileges.

Recommendations Apply appropriate quoting to the service path for the OKI Local Port Manager service.

Exploit

Correção

Enumeração de Fraquezas

CWE-428

Identificadores relacionados

CVE-2021-47884

Produtos afetados

Configuration Tool

Oki Local Port Manager

Referências · 5

• 🔥 https://exploit-db.com/exploits/49624 · Exploit
• https://web.archive.org/web/20211207181409/https://oki.com/me/printing/services-and-solutions/smart-solutions/print-job-accounting/index.html · Nota
• https://vulncheck.com/advisories/configuration-tool-oplclsrv-unquoted-service-path · Nota
• https://t.me/CVEtracker/42674 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2021-47884 · Nota de Segurança