Wise Care 365 5.6.7.568 contains an unquoted service path vulnerability in the WiseBootAssistant service running with LocalSystem privileges. Attackers can expl…

CVE-2021-47804 affects Wise Care 365 version 5.6.7.568, containing an unquoted service path vulnerability in the WiseBootAssistant service. The service runs with LocalSystem privileges, allowing attackers to exploit this flaw by placing malicious executables in the service path. When the service restarts, the malicious code executes with elevated system privileges. This is a privilege escalation vulnerability that could allow local attackers to gain SYSTEM-level access on affected Windows systems running the vulnerable version of Wise Care 365.