CVE-2021-47847CWE-428

Disk Sorter Server 13.6.12 - 'Disk Sorter Server' Unquoted Service Path

High · published January 16, 2026

CVSS v4.0
8.5
EPSS
0%
Percentile
5.6
In the wild
Unconfirmed
What it is

⚡ An unquoted service path in Disk Sorter Server makes local attacks surprisingly sneaky! An attacker could launch arbitrary code just by exploiting the path configuration. 🔥 Think of it like a mislabelled box in a busy warehouse; if the workers trust the label without double-checking, anyone can slip in a harmful item without raising suspicion. If exploited, an attacker could execute malicious code with higher privileges, potentially compromising sensitive data or even taking full control of the affected system. It's a local issue that could lead to severe consequences, making your defenses seem like a house of cards!

Put simply

Think of it like a mislabelled box in a busy warehouse; if the workers trust the label without double-checking, anyone can slip in a harmful item without raising suspicion. This vulnerability arises from an unquoted service path in 'C:\Program Files\Disk Sorter Server\bin\disksrs.exe', which allows attackers to inject malicious executables. Local attackers could exploit this path configuration to escalate their privileges.

What to do

If exploited, an attacker could execute malicious code with higher privileges, potentially compromising sensitive data or even taking full control of the affected system. It's a local issue that could lead to severe consequences, making your defenses seem like a house of cards! To mitigate this risk, ensure that the Disk Sorter Server is updated to the latest version where this issue is fixed. Additionally, review your service paths and make sure they are quoted properly to avoid similar vulnerabilities. Always keep your software up to date! You've got this! Implement these steps, and you'll be well on your way to securing your systems. 🛡️

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00166 · 5.6th percentile
Weakness
CWE-428 · Unquoted Search Path or Element
Published
2026-01-16T19:09Z
EPSS history
Timeline
  • 16 JAN 19:09Z
    Disk Sorter Server 13.6.12 - 'Disk Sorter Server' Unquoted Service Path
    cvelistv5