PT-2026-3048 · Dynojet · Dynojet Power Core

Published 2026-01-15 · Updated 2026-01-15 · CVE-2021-47773

Positive Technologies (AI Summary)

CVSS v4.0

8.5

High

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Dynojet Power Core version 2.3.0

Description The software contains an unquoted service path issue within the DJ.UpdateService. This allows local authenticated users to potentially execute code with elevated privileges. An attacker can exploit the unquoted binary path by placing malicious executables in the service's file path, potentially gaining Local System access.

Recommendations Ensure the service path is properly quoted to prevent the execution of unauthorized code.

Exploit

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2021-47773

Affected Products

Dynojet Power Core

References · 5

• 🔥 https://exploit-db.com/exploits/50466 · Exploit
• https://osv.dev/vulnerability/CVE-2021-47773 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-47773 · Security Note
• https://dynojet.com · Note
• https://twitter.com/CVEnew/status/2011926096774942895 · Twitter Post