What’s Vulnerable › Vulnerabilities
CVE-2021-47767: 10-Strike Network Inventory Explorer Pro 9.31 - 'srvInventoryWebServer' Unquoted Service Path
- Severity: high (CVSS 7.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2026-01-15 · updated 2026-06-17
- Weakness: CWE-428
Description
10-Strike Network Inventory Explorer Pro 9.31 contains an unquoted service path vulnerability in the srvInventoryWebServer service running with LocalSystem privileges. Attackers can exploit the unquoted path by placing malicious executables in potential path segments to achieve privilege escalation and execute code with system-level permissions.
Affected products
References
- https://www.10-strike.com/
- https://www.exploit-db.com/exploits/50494
- https://www.exploit-db.com/exploits/50494
Get alerted when CVE-2021-47767 or the next vulnerability affects your stack