CVE-2021-47809
BaseFortify
Publication date: 2026-01-16
Last updated on: 2026-01-16
Assigner: VulnCheck
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| disk_sorter | disk_sorter_enterprise | 13.6.12 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-428 | The product uses a search path that contains an unquoted element, in which the element contains whitespace or other separators. This can cause the product to access resources in a parent path. |
Attack-Flow Graph
AI Powered Q&A
How can this vulnerability impact me? :
Exploiting this vulnerability can allow a local attacker to execute arbitrary code with elevated privileges on the affected system. This means the attacker can escalate their privileges, potentially gaining full control over the system, compromising confidentiality, integrity, and availability of data and services. [1, 2]
Can you explain this vulnerability to me?
This vulnerability is an unquoted service path issue in Disk Sorter Enterprise version 13.6.12 on Windows. The service executable path ('C:\Program Files\Disk Sorter Enterprise\bin\disksrs.exe') is not enclosed in quotes, which allows local attackers with limited privileges to place malicious executables in certain locations. When the system starts the service, it may execute the malicious executable instead of the intended one, leading to arbitrary code execution and privilege escalation. [1, 2]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability can be detected by querying Windows services to identify unquoted service paths that start automatically and are not located in the Windows directory. Commands such as 'wmic service get name,pathname,startmode' and 'sc qc <service_name>' can be used to check the service executable paths for missing quotes around the path, specifically looking for the path 'C:\Program Files\Disk Sorter Enterprise\bin\disksrs.exe' without quotes. [1]
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include correcting the unquoted service path by enclosing the executable path in quotes in the Windows service configuration. This prevents the system from misinterpreting the path and executing malicious executables placed by attackers. Additionally, ensure that only trusted users have local access to the system to reduce the risk of exploitation. [1, 2]