CVE-2021-47890 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

LogonExpert 8.1 contains an unquoted service path vulnerability in the LogonExpertSvc service running with LocalSystem privileges. Attackers can exploit the unq…
High CVSS: 8.5

CVE-2021-47890

LogonExpert 8.1 contains an unquoted service path vulnerability in the LogonExpertSvc service running with LocalSystem privileges. Attackers can exploit the unquoted path to place malicious executables in intermediate directories, potentially gaining elevated system access during service startup.
Vendor
-
Product
-
CWE
CWE-428
Yayın Tarihi
2026-01-23 17:15:52
Güncelleme
2026-01-26 15:03:33
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-

Kategoriler

CWE-428 HIGH 2026

Referanslar

https://download.logonexpert.com/LogonExpertSetup64.msi https://www.exploit-db.com/exploits/49586 https://www.softros.com/ https://www.vulncheck.com/advisories/logonexpert-logonexpertsvc-unquoted-service-path