PT-2026-39519 · Unknown · Argus Surveillance Dvr

Published 2026-05-10 · Updated 2026-05-10 · CVE-2021-47945

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Argus Surveillance DVR version 4.0

Description The DVRWatchdog service contains an unquoted service path issue. This allows local attackers to escalate privileges by exploiting the service binary path. An attacker can place a malicious executable in the Program Files directory, which will then be executed with LocalSystem privileges upon service startup.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2021-47945

Affected Products

Argus Surveillance Dvr

References · 4

• 🔥 https://exploit-db.com/exploits/50261 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-47945 · Security Note
• https://twitter.com/CVEnew/status/2053537421116223759 · Twitter Post
• https://vulncheck.com/advisories/argus-surveillance-dvr-unquoted-service-path-privilege-escalation · Note