CVE-2021-47780
BaseFortify
Publication date: 2026-01-16
Last updated on: 2026-01-16
Assigner: VulnCheck
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| grasssoft | macro_expert | 4.7 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-428 | The product uses a search path that contains an unquoted element, in which the element contains whitespace or other separators. This can cause the product to access resources in a parent path. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2021-47780 is an unquoted service path vulnerability in Macro Expert version 4.7. The service executable path contains spaces but is not enclosed in quotation marks, allowing local attackers to place malicious executables in directories along the service path. When the service starts, the system may mistakenly execute the attacker's code with elevated LocalSystem privileges, leading to local privilege escalation. [1, 2]
How can this vulnerability impact me? :
This vulnerability can allow a local attacker to execute arbitrary code with elevated system privileges (LocalSystem) on the affected machine. This means the attacker can gain full control over the system, potentially installing malware, stealing data, or disrupting system operations. [1, 2]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
You can detect this vulnerability by checking the service configuration for unquoted executable paths. Specifically, for Macro Expert 4.7, you can run commands such as `sc qc "Macro Expert"` or `wmic service get name,displayname,pathname,startmode` to inspect the service executable path and confirm if it is unquoted and set to auto-start. An unquoted path containing spaces indicates the vulnerability. [1]
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include correcting the service executable path by enclosing it in quotation marks to prevent execution of malicious executables placed along the path. Additionally, restrict write permissions on directories in the service path, especially system root and program files directories, to prevent attackers from placing malicious files. Restarting the service or system after fixing the path ensures the fix takes effect. [1, 2]