Skip to content
CVE PROGRAM SOURCE RECORD8.5 High

CVE-2021-47890

LogonExpert 8.1 - 'LogonExpertSvc' Unquoted Service Path

Description

LogonExpert 8.1 contains an unquoted service path vulnerability in the LogonExpertSvc service running with LocalSystem privileges. Attackers can exploit the unquoted path to place malicious executables in intermediate directories, potentially gaining elevated system access during service startup.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Softros Systems LogonExpert

  • 8.1affected

References