CVE-2021-47880
Realtek Wireless LAN Utility 700.1631 - 'Realtek11nSU' Unquoted Service Path
HIGH 8.5EPSS 0.2%
Realtek Wireless LAN Utility 700.1631 contains an unquoted service path vulnerability that allows local users to potentially execute code with elevated system privileges. Attackers can exploit the unquoted service path by inserting malicious code in the system root path that would execute during application startup or system reboot.
- Affected
- Realtek Semiconductor Corp. · Realtek Wireless LAN Utility
- CVSS v4.0 VULNCHECK
- 8.5 HIGH
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS v3.1 VULNCHECK
- 7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS
- 0.15% chance of exploitation in the next 30 days, 4th percentile
- Published
- 2026-01-21
- Updated
- 2026-01-22