PT-2026-3285
CVE-2021-47829
·
Published
2026-01-16
·
Updated
2026-01-17
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
DHCP Broadband version 4.1.0.1503
Description
The software contains an unquoted service path vulnerability in its service configuration. This allows local attackers to execute code with elevated privileges. The vulnerable path is located at 'C:Program FilesDHCP Broadband 4dhcpt.exe', enabling attackers to inject malicious code that executes during service startup with LocalSystem permissions.
Recommendations
Apply appropriate quoting to the service path in the service configuration.
Found an issue in the description? Have something to add? Feel free to write us 👾