PT-2026-3285 · Unknown · Dhcp Broadband

Erick Galindo · Published 2026-01-16 · Updated 2026-01-17 · CVE-2021-47829

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions DHCP Broadband version 4.1.0.1503

Description The software contains an unquoted service path vulnerability in its service configuration. This allows local attackers to execute code with elevated privileges. The vulnerable path is located at 'C:Program FilesDHCP Broadband 4dhcpt.exe', enabling attackers to inject malicious code that executes during service startup with LocalSystem permissions.

Recommendations Apply appropriate quoting to the service path in the service configuration.

Exploit

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2021-47829

Affected Products

Dhcp Broadband

References · 6

• 🔥 https://exploit-db.com/exploits/49850 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-47829 · Security Note
• https://vulncheck.com/advisories/dhcp-broadband-dhcptexe-unquoted-service-path · Note
• https://twitter.com/CVEnew/status/2012303214633435336 · Twitter Post
• https://twitter.com/RedPacketSec/status/2012332020555272322 · Twitter Post
• https://weird-solutions.com · Note