CVE-2021-47773
Published: 15 January 2026
Summary
CVE-2021-47773 is a high-severity Unquoted Search Path or Element (CWE-428) vulnerability in Dynojet Power Core. Its CVSS base score is 8.5 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Path Interception by Unquoted Path (T1574.009); ranked at the 18.8th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 CM-6 (Configuration Settings) and SI-2 (Flaw Remediation).
Deeper analysis
CVE-2021-47773 is an unquoted service path vulnerability in Dynojet Power Core version 2.3.0, specifically affecting the DJ.UpdateService component. This flaw, mapped to CWE-428, enables local authenticated users to potentially execute arbitrary code with elevated privileges by exploiting the unquoted binary path in the service configuration. The vulnerability carries a CVSS v3.1 base score of 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), reflecting high impact from a local vector with low complexity and low privileges required.
An attacker with local authenticated access can exploit the issue by placing a malicious executable in a directory along the service's unquoted search path. Upon service startup or restart, the system may invoke the attacker's binary instead of the legitimate one, granting Local System-level privileges. This allows full control over the affected system, including high confidentiality, integrity, and availability impacts.
References include the Dynojet website at https://www.dynojet.com/ and an exploit proof-of-concept documented at https://www.exploit-db.com/exploits/50466. A public exploit is available, indicating practical exploitability for local privilege escalation scenarios.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2026-2756
Vulnerability details
Dynojet Power Core 2.3.0 contains an unquoted service path vulnerability in the DJ.UpdateService that allows local authenticated users to potentially execute code with elevated privileges. Attackers can exploit the unquoted binary path by placing malicious executables in the service's file…
more
path to gain Local System access.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Unquoted service path (CWE-428) in DJ.UpdateService directly enables path interception by placing a malicious binary in the search path, executed at service start for SYSTEM privileges.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Enforces secure configuration settings for services, including properly quoted binary paths, directly preventing exploitation of unquoted service path vulnerabilities like that in DJ.UpdateService.
Requires identification, reporting, and timely remediation of flaws such as the unquoted service path in Dynojet Power Core 2.3.0 to eliminate the vulnerability.
Applies least privilege to services, limiting the damage from privilege escalation even if an unquoted service path is exploited to execute malicious code.