Disk Sorter Server 13.6.12 - 'Disk Sorter Server' Unquoted Service Path | Advisories

Advisories

Disk Sorter Server 13.6.12 - 'Disk Sorter Server' Unquoted Service Path

severity: high
date: January 16, 2026
Affecting: Disk Sorter Server 13.6.12
CVE: CVE-2021-47847
CWE: CWE-428 Unquoted Search Path or Element
CVSS: 8.5
CVSS V4 Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
References: ExploitDB-50013
Vendor Homepage
Credit: BRushiran
Description: Disk Sorter Server 13.6.12 contains an unquoted service path vulnerability in its binary path configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files\Disk Sorter Server\bin\disksrs.exe' to inject malicious executables and escalate privileges.