Cyber Resilience

CVE-2021-47767

HighPublic PoC

Published: 15 January 2026

Published
15 January 2026
Modified
30 January 2026
KEV Added
Patch
CVSS Score v4 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
EPSS Score 0.0021 11.4th percentile
Risk Priority 55 floored blend · peak EPSS

Summary

CVE-2021-47767 is a high-severity Unquoted Search Path or Element (CWE-428) vulnerability in 10-Strike Network Inventory Explorer. Its CVSS base score is 8.5 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Path Interception by Unquoted Path (T1574.009); ranked at the 11.4th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

The strongest mitigations our analysis identified are NIST 800-53 CM-6 (Configuration Settings) and SI-2 (Flaw Remediation).

Deeper analysis

CVE-2021-47767 is an unquoted service path vulnerability in 10-Strike Network Inventory Explorer Pro version 9.31, affecting the srvInventoryWebServer service that runs with LocalSystem privileges. This flaw, mapped to CWE-428, allows exploitation due to the service executable path not being properly quoted, enabling attackers to hijack the service launch process.

A local attacker with low privileges (PR:L) can exploit this vulnerability with low attack complexity (AC:L) and no user interaction required. By placing a malicious executable in one of the potential unquoted path segments, the attacker achieves privilege escalation, resulting in arbitrary code execution with system-level permissions. The CVSS v3.1 base score is 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), reflecting high impacts on confidentiality, integrity, and availability.

References include the vendor site at https://www.10-strike.com/ and a proof-of-concept exploit documented at https://www.exploit-db.com/exploits/50494, which may provide further details on exploitation and potential mitigations such as updating the software or applying service path fixes. The CVE was published on 2026-01-15.

EU & UK References

Vulnerability details

10-Strike Network Inventory Explorer Pro 9.31 contains an unquoted service path vulnerability in the srvInventoryWebServer service running with LocalSystem privileges. Attackers can exploit the unquoted path by placing malicious executables in potential path segments to achieve privilege escalation and execute…

more

code with system-level permissions.

CWE(s)

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1574.009 Path Interception by Unquoted Path Stealth
Adversaries may execute their own malicious payloads by hijacking vulnerable file path references.
Why these techniques?

Unquoted service path in LocalSystem service directly enables path interception by unquoted path for privilege escalation to SYSTEM.

Confidence: HIGH · MITRE ATT&CK Enterprise v19.0

CVEs Like This One

CVE-2021-47772Same product: 10-Strike Network Inventory Explorer
CVE-2020-36928Shared CWE-428
CVE-2023-54336Shared CWE-428
CVE-2020-37048Shared CWE-428
CVE-2019-25306Shared CWE-428
CVE-2020-36979Shared CWE-428
CVE-2020-36929Shared CWE-428
CVE-2020-37017Shared CWE-428
CVE-2021-47859Shared CWE-428
CVE-2019-25309Shared CWE-428

Affected Assets

10-strike
network inventory explorer
9.31

Mitigating Controls

Mitigating Controls (NIST 800-53 r5) AI

prevent

Directly requires identification, reporting, and correction of the unquoted service path flaw in srvInventoryWebServer to prevent privilege escalation exploitation.

prevent

Mandates secure configuration settings, including properly quoting the srvInventoryWebServer executable path to block hijacking via unquoted segments.

prevent

Enforces least privilege for high-privilege services like srvInventoryWebServer running as LocalSystem, reducing the impact of successful unquoted path exploitation.

References