Vulnerability details
CVE-2021-47822
Diskboss Service
DiskBoss Service 12.2.18 - 'diskbsa.exe' Unquoted Service Path
CVSS 4.0
8.5High
Official description
DiskBoss Service 12.2.18 contains an unquoted service path vulnerability in its binary path configuration that allows local attackers to execute code with elevated privileges. Attackers can exploit the unquoted path by placing malicious executables in potential path locations to gain system-level access during service startup.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 8.5High | 4.0 | CVEProject cvelistV5 (CNA) (VulnCheck) | CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
| 7.8High | 3.1 | CVEProject cvelistV5 (CNA) (VulnCheck) | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Diskboss | DiskBoss Service | 12.2.18 | CVEProject cvelistV5 (CNA) |
References and advisories
3- https://www.exploit-db.com/exploits/49899 exploit
- https://www.diskboss.com product
- https://www.vulncheck.com/advisories/diskboss-service-diskbsaexe-unquoted-service-path third-party-advisory
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2026-01-16
- Last updated
- 2026-10-01
- State
- Published
- Assigner (CNA)
- VulnCheck
Exploit prediction (EPSS)
0.16%
Probability of exploitation in 30 days
5.9%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- None
- Technical impact
- Total
Weaknesses (CWE)
- CWE-428Unquoted Search Path or Element