CVE-2021-47862
Published: 21 January 2026
Summary
CVE-2021-47862 is a high-severity Unquoted Search Path or Element (CWE-428) vulnerability in Hirezstudios (inferred from references). Its CVSS base score is 8.5 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Path Interception by Unquoted Path (T1574.009); ranked at the 2.7th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 CM-6 (Configuration Settings) and SI-2 (Flaw Remediation).
Deeper analysis
CVE-2021-47862 is an unquoted service path vulnerability (CWE-428) affecting Hi-Rez Studios version 5.1.6.3, specifically in the HiPatchService component. This flaw occurs when the service path is not properly quoted, allowing attackers to manipulate the execution path under certain conditions. The vulnerability has a CVSS v3.1 base score of 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), indicating high impact potential from local access.
Local attackers with low privileges can exploit this vulnerability during system startup or reboot by placing a malicious executable in a directory that precedes the legitimate service binary in the system's search path. Successful exploitation enables the execution of arbitrary code with LocalSystem permissions, granting full administrative control over the affected system, including high confidentiality, integrity, and availability impacts.
Advisories and references, including a detailed write-up from VulnCheck on the HiPatchService unquoted path issue, a vendor page from Hi-Rez Studios, and a proof-of-concept exploit on Exploit-DB (ID 49701), document the vulnerability but do not specify patches or mitigations in the available information. Security practitioners should verify service configurations and monitor for updates from Hi-Rez Studios.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2026-3612
Vulnerability details
Hi-Rez Studios 5.1.6.3 contains an unquoted service path vulnerability in the HiPatchService that allows local attackers to execute code with elevated privileges. Attackers can exploit the unquoted path during system startup or reboot to inject and run malicious executables with…
more
LocalSystem permissions.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Unquoted service path (CWE-428) directly enables path interception by unquoted path for LocalSystem code execution and privilege escalation.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Establishes and enforces secure configuration settings for services, including properly quoting executable paths to directly prevent exploitation of unquoted service path vulnerabilities like that in HiPatchService.
Requires timely identification, reporting, and remediation of known flaws such as the unquoted service path in Hi-Rez Studios HiPatchService to eliminate the vulnerability.
Limits system functionality to essential capabilities by authorizing and disabling unnecessary services like HiPatchService, reducing the attack surface for unquoted path exploitation.