Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.5

Disk Sorter Server 13.6.12 allows local attackers to run malicious code

CVE-2021-47847 · published 9 months ago
Summary

A security issue in Disk Sorter Server 13.6.12 allows an attacker with access to the local system to potentially run unauthorized code. This could happen if an attacker places a malicious executable in a folder with the same name as a legitimate Disk Sorter Server component. To protect your system, update to a fixed version of Disk Sorter Server or remove any unnecessary executables from the system.

Original advisory text
Disk Sorter Server 13.6.12 contains an unquoted service path vulnerability in its binary path configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit ...
Disk Sorter Server 13.6.12 contains an unquoted service path vulnerability in its binary path configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files\Disk Sorter Server\bin\disksrs.exe' to inject malicious executables and escalate privileges.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
8.5 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-428Unquoted Search Path or Element
Timeline
Published16 Jan 2026
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2021-47847 · NVD
Track software like this
Free during beta