OKI Configuration Tool 1.6.53 contains an unquoted service path vulnerability in the OKI Local Port Manager service that allows local attackers to potentially e…

CVE-2021-47884 affects OKI Configuration Tool version 1.6.53, containing an unquoted service path vulnerability in the OKI Local Port Manager service. The vulnerability exists in the path 'C:\Program Files\Okidata\Common\extend3\portmgrsrv.exe' which lacks proper quotes around the service path. Local attackers can exploit this weakness to inject malicious executables into the path and achieve privilege escalation. The vulnerability allows for arbitrary code execution with elevated privileges on affected systems.