CVE-2021-47790

CVE-2021-47790 describes an unquoted service path vulnerability in Active WebCam 11.5, allowing local attackers to execute arbitrary code with elevated system privileges. This misconfiguration enables attackers to place malicious executables in specific directories, gaining administrative access. With a CVSS score of 7.8 (HIGH), the vulnerability is easily exploitable locally with low complexity, leading to complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation, nor publicly available exploit code in Metasploit or ExploitDB, the vulnerability has garnered significant community discussion, indicating awareness among security researchers.