PT-2022-11847

CVE-2021-43460

·

Published

2022-04-04

·

Updated

2022-04-11

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions System Explorer version 7.0.0
Description A vulnerability exists due to an unquoted service path in the SystemExplorerHelpService service executable path, which can be exploited via a specially crafted file.
Recommendations For System Explorer version 7.0.0, consider updating to a newer version that quotes the service path to prevent exploitation. As a temporary workaround, restrict access to the SystemExplorerHelpService to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾