PT-2026-3285

CVE-2021-47829

·

Published

2026-01-16

·

Updated

2026-01-17

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions DHCP Broadband version 4.1.0.1503
Description The software contains an unquoted service path vulnerability in its service configuration. This allows local attackers to execute code with elevated privileges. The vulnerable path is located at 'C:Program FilesDHCP Broadband 4dhcpt.exe', enabling attackers to inject malicious code that executes during service startup with LocalSystem permissions.
Recommendations Apply appropriate quoting to the service path in the service configuration.
Exploitability
Exploit
Fix
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾