Security Advisory
CVE-2021-47985
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Brother SAPSprint 7.60 contains an unquoted service path vulnerability in the SAPSprint service binary that allows local attackers to escalate privileges. Attackers can place a malicious executable in the Program Files directory path to be executed with LocalSystem privileges when the service starts automatically.