CVE-2021-47887CWE-428

Print Job Accounting 4.4.10 - 'OkiJaSvc' Unquoted Service Path

High · published January 21, 2026

CVSS v4.0
8.5
EPSS
0%
Percentile
3.9
In the wild
Unconfirmed
What it is

⚡ A pesky unquoted service path is the gateway for local attackers in the OKI Print Job Accounting 4.4.10! This vulnerability lets them potentially execute arbitrary code — yikes! 🔥 Think of it as a restaurant that doesn't properly label its kitchen areas. Any sneaky chef could wander in and whip up their own special dish, regardless of whether they were supposed to be there or not! If exploited, an attacker could inject malicious executables and elevate their privileges, leading to unauthorized access and control over the system. This could mean anything from stealing sensitive information to wreaking havoc on your network — absolutely devastating!

Put simply

Think of it as a restaurant that doesn't properly label its kitchen areas. Any sneaky chef could wander in and whip up their own special dish, regardless of whether they were supposed to be there or not! This vulnerability lies in the unquoted service path of the OkiJaSvc service, which allows unauthorized code execution by local attackers when they exploit the path in 'C:\Program Files\Okidata\Print Job Accounting\'.

What to do

If exploited, an attacker could inject malicious executables and elevate their privileges, leading to unauthorized access and control over the system. This could mean anything from stealing sensitive information to wreaking havoc on your network — absolutely devastating! To remediate, update to the latest version of OKI Print Job Accounting, ensuring the service paths are enclosed in quotes. It’s also wise to regularly audit your services for similar unquoted paths and tighten access controls. 🛡️ This is fixable! Take these steps to secure your system, and you'll be a security hero in no time! 🚀

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00151 · 3.9th percentile
Weakness
CWE-428 · Unquoted Search Path or Element
Published
2026-01-21T17:27Z
EPSS history
Timeline
  • 21 JAN 17:27Z
    Print Job Accounting 4.4.10 - 'OkiJaSvc' Unquoted Service Path
    cvelistv5