PT-2026-3818 · Honeywell · Win-Pack Pro

Alan Mondragon · CVE-2021-47866 · Published 2026-01-21 · Updated 2026-01-21

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WIN-PACK PRO version 4.8

Description The GuardTourService contains an unquoted service path in 'C:Program Files WINPAKPROWP GuardTour Service.exe'. This allows local users to inject malicious code that can be executed with elevated system privileges during the service startup.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2021-47866

Affected Products

Win-Pack Pro

References · 4

• 🔥 https://exploit-db.com/exploits/49690 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-47866 · Security Note
• https://security.honeywell.com/product-repository/winpak · Note
• https://vulncheck.com/advisories/win-pack-pro-guardtourservice-unquoted-service-path · Note