Vulnerability Description
TotalAV 5.15.69 contains an unquoted service path vulnerability in multiple system services running with LocalSystem privileges. Attackers can place malicious executables in specific unquoted path segments to potentially gain SYSTEM-level access by exploiting the service path configuration.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Totalav | Totalav | 5.15.69 |
Related Weaknesses (CWE)
References
- https://www.exploit-db.com/exploits/50314ExploitThird Party AdvisoryVDB Entry
- https://www.totalav.comProduct
- https://www.vulncheck.com/advisories/totalav-unquoted-service-pathThird Party Advisory
- https://www.exploit-db.com/exploits/50314ExploitThird Party AdvisoryVDB Entry
FAQ
What is CVE-2021-47787?
CVE-2021-47787 is a vulnerability with a CVSS score of 7.8 (HIGH). TotalAV 5.15.69 contains an unquoted service path vulnerability in multiple system services running with LocalSystem privileges. Attackers can place malicious executables in specific unquoted path seg...
How severe is CVE-2021-47787?
CVE-2021-47787 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-47787?
Check the references section above for vendor advisories and patch information. Affected products include: Totalav Totalav.