CVE-2021-47787: TotalAV 5.15.69 - Unquoted Service Path
TotalAV 5.15.69 contains an unquoted service path vulnerability in multiple system services running with LocalSystem privileges. Attackers can place malicious executables in specific unquoted path segments to potentially gain SYSTEM-level access by exploiting the service path configuration.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-47787?
CVE-2021-47787 is considered a medium severity vulnerability due to its potential for exploitation to gain SYSTEM-level access.
How do I fix CVE-2021-47787?
To fix CVE-2021-47787, ensure all service paths are properly quoted in the TotalAV configuration.
What are the effects of exploiting CVE-2021-47787?
Exploiting CVE-2021-47787 can allow attackers to execute arbitrary code with LocalSystem privileges.
Which software versions are affected by CVE-2021-47787?
CVE-2021-47787 affects TotalAV version 5.15.69.
Is CVE-2021-47787 still a concern if I have updated TotalAV?
If you have updated TotalAV to a version that addresses this issue, CVE-2021-47787 should no longer be a concern.