PT-2026-3284 · Unknown · Bootpturbo

Erick Galindo · CVE-2021-47828 · Published 2026-01-16 · Updated 2026-01-17

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions BOOTP Turbo version 2.0.0.1253

Description BOOTP Turbo version 2.0.0.1253 contains an unquoted service path vulnerability in its Windows service configuration. An attacker can exploit the unquoted path to execute arbitrary code with elevated LocalSystem privileges during system startup or reboot.

Recommendations Ensure the service path is enclosed in quotes during the Windows service configuration.

Exploit

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2021-47828

Affected Products

Bootpturbo

References · 6

• 🔥 https://exploit-db.com/exploits/49851 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-47828 · Security Note
• https://vulncheck.com/advisories/bootp-turbo-bootptexe-unquoted-service-path · Note
• https://twitter.com/CVEnew/status/2012303215635873867 · Twitter Post
• https://twitter.com/RedPacketSec/status/2012332019313701225 · Twitter Post
• https://weird-solutions.com · Note