Cyber Posture

CVE-2021-47974

HighPublic PoC

Published: 16 May 2026

Published
16 May 2026
Modified
16 May 2026
KEV Added
—
Patch
—
CVSS Score 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score N/A
Risk Priority 16 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2021-47974 is a high-severity Unquoted Search Path or Element (CWE-428) vulnerability in Vxsearch (inferred from references). Its CVSS base score is 7.8 (High).

Operationally, it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

NVD Description

VX Search 13.5.28 contains an unquoted service path vulnerability in both VX Search Server and VX Search Enterprise services that allows local attackers to escalate privileges. Attackers can place malicious executables in unquoted path directories like C:\Program Files\VX Search to…

more

execute arbitrary code with LocalSystem privileges when services restart.

Deeper analysisAI

Automated synthesis unavailable for this CVE.

Details

CWE(s)
CWE-428

Affected Products

Vxsearch
—
inferred from references and description; NVD did not file a CPE for this CVE

References