CVE-2021-47869: BRAdmin Professional 3.75 - 'BRA_Scheduler' Unquoted Service Path
Brother BRAdmin Professional 3.75 contains an unquoted service path vulnerability in the BRA_Scheduler service that allows local users to potentially execute arbitrary code. Attackers can place a malicious executable named 'BRAdmin' in the C:\Program Files (x86)\Brother\ directory to gain local system privileges.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-47869?
CVE-2021-47869 is classified as a high severity vulnerability due to its potential to allow local users to execute arbitrary code.
How do I fix CVE-2021-47869?
To fix CVE-2021-47869, you should update Brother BRAdmin Professional to the latest version that addresses the unquoted service path issue.
What systems are affected by CVE-2021-47869?
CVE-2021-47869 affects Brother BRAdmin Professional version 3.75.
Can CVE-2021-47869 be exploited remotely?
CVE-2021-47869 is not a remote vulnerability; it requires local access to the affected system.
What is an unquoted service path in the context of CVE-2021-47869?
An unquoted service path allows an attacker to place a malicious executable in a location that the system may execute without appropriate checks.