PT-2026-4506 · Unknown · Logonexpert

Victor Mondragón · CVE-2021-47890 · Publicado 2026-01-23 · Atualizado 2026-01-24

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LogonExpert version 8.1

Description LogonExpert 8.1 has an unquoted service path issue within the LogonExpertSvc service, which operates with LocalSystem privileges. This allows attackers to potentially place malicious executables in intermediate directories. Successful exploitation could lead to elevated system access when the service starts.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Enumeração de Fraquezas

CWE-428

Identificadores relacionados

CVE-2021-47890

Produtos afetados

Logonexpert

Referências · 7

• 🔥 https://exploit-db.com/exploits/49586 · Exploit
• https://softros.com · Nota
• https://download.logonexpert.com/LogonExpertSetup64.msi · Nota
• https://t.me/CVEtracker/42854 · Publicação no Telegram
• https://vulncheck.com/advisories/logonexpert-logonexpertsvc-unquoted-service-path · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2021-47890 · Nota de Segurança
• https://twitter.com/CVEnew/status/2014995841132695637 · Publicação no Twitter