PT-2026-3288
CVE-2021-47833
·
Published
2026-01-16
·
Updated
2026-01-16
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
WifiHotSpot version 1.0.0.0
Description
WifiHotSpot 1.0.0.0 contains an unquoted service path vulnerability in
WifiHotSpotService.exe. This allows local attackers to execute code with elevated privileges. The vulnerability can be exploited during system startup or reboot by injecting and running malicious executables with LocalSystem permissions.Recommendations
Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, consider modifying the service path to include quotes to prevent the execution of unauthorized executables.
Found an issue in the description? Have something to add? Feel free to write us 👾