PT-2026-3835 · Oki · Oki Local Port Manager+1

Brian Rodriguez · Published 2026-01-21 · Updated 2026-01-21 · CVE-2021-47884

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OKI Configuration Tool version 1.6.53

Description OKI Configuration Tool version 1.6.53 contains a flaw in the OKI Local Port Manager service related to an unquoted service path. This allows local attackers to potentially execute arbitrary code. The unquoted path is located at 'C:Program FilesOkidataCommonextend3portmgrsrv.exe', enabling attackers to inject malicious executables and escalate privileges.

Recommendations Apply appropriate quoting to the service path for the OKI Local Port Manager service.

Exploit

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2021-47884

Affected Products

Configuration Tool

Oki Local Port Manager

References · 5

• 🔥 https://exploit-db.com/exploits/49624 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-47884 · Security Note
• https://web.archive.org/web/20211207181409/https://oki.com/me/printing/services-and-solutions/smart-solutions/print-job-accounting/index.html · Note
• https://vulncheck.com/advisories/configuration-tool-oplclsrv-unquoted-service-path · Note
• https://t.me/CVEtracker/42674 · Telegram Post