CVE-2021-47880CWE-428

Realtek Wireless LAN Utility 700.1631 - 'Realtek11nSU' Unquoted Service Path

High · published January 21, 2026

CVSS v4.0
8.5
EPSS
0%
Percentile
3.9
In the wild
Unconfirmed
What it is

⚡ A local user can exploit this unquoted service path vulnerability with a simple trick! When the Realtek Wireless LAN Utility starts up, it might just run the wrong command and let unauthorized code take the wheel. 🔥 Think of it like a restaurant that doesn’t double-check the order ticket; the chef just starts cooking whatever's listed first. If a mischievous diner sneaks in an order that tests the limits, the kitchen might whip up something dangerous! An attacker with local access could execute malicious code with elevated system privileges, potentially gaining full control over the system. This could lead to unauthorized access to sensitive data, modification of system settings, or even complete system compromise. Yikes!

Put simply

Think of it like a restaurant that doesn’t double-check the order ticket; the chef just starts cooking whatever's listed first. If a mischievous diner sneaks in an order that tests the limits, the kitchen might whip up something dangerous! This vulnerability allows local users to exploit an unquoted service path within the Realtek Wireless LAN Utility, enabling them to run arbitrary commands at startup or reboot simply by placing malicious code in the system root path.

What to do

An attacker with local access could execute malicious code with elevated system privileges, potentially gaining full control over the system. This could lead to unauthorized access to sensitive data, modification of system settings, or even complete system compromise. Yikes! To remediate, ensure that the service paths are correctly quoted in the configuration files. Upgrade to the latest version of the Realtek Wireless LAN Utility to close this security gap. Don't forget to audit user access to minimize risk! You've got this! Take these steps and you'll be well on your way to securing your system. 🛡️

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00151 · 3.9th percentile
Weakness
CWE-428 · Unquoted Search Path or Element
Published
2026-01-21T17:27Z
EPSS history
Timeline
  • 21 JAN 17:27Z
    Realtek Wireless LAN Utility 700.1631 - 'Realtek11nSU' Unquoted Service Path
    cvelistv5