Print Job Accounting 4.4.10 - 'OkiJaSvc' Unquoted Service Path | Advisories

Advisories

Print Job Accounting 4.4.10 - 'OkiJaSvc' Unquoted Service Path

severity: high
date: January 21, 2026
Affecting: Print Job Accounting 4.4.10
CVE: CVE-2021-47887
CWE: CWE-428 Unquoted Search Path or Element
CVSS: 8.5
CVSS V4 Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
References: ExploitDB-49623
Archived OKI Product Webpage
Credit: Brian Rodriguez
Description: OKI Print Job Accounting 4.4.10 contains an unquoted service path vulnerability in the OkiJaSvc service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files\Okidata\Print Job Accounting\' to inject malicious executables and escalate privileges.