Pingzapper 2.3.1 contains an unquoted service path vulnerability in the PingzapperSvc service that allows local attackers to potentially execute arbitrary code.…

CVE-2021-47886 is an unquoted service path vulnerability in Pingzapper 2.3.1 affecting the PingzapperSvc service. The vulnerability allows local attackers to potentially execute arbitrary code by exploiting the unquoted path in 'C:\Program Files (x86)\Pingzapper\PZService.exe'. Attackers can inject malicious executables into the path to escalate privileges. This is a privilege escalation vulnerability that requires local access but can lead to full system compromise. The vulnerability has been documented with proof-of-concept exploits available.