CVE-2021-47945
📛 CVE Title
(no title)
Description
Argus Surveillance DVR 4.0 contains an unquoted service path vulnerability in the DVRWatchdog service that allows local attackers to escalate privileges by exploiting the service binary path. Attackers can place a malicious executable in the Program Files directory to be executed with LocalSystem privileges when the service starts.
Overview
- State
- —
- Assigner (CNA)
- —
- CVSS severity
- high
- CVSS score
- 7.8 / 10
- CVSS vector
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H- Effective score
- 7.8 / 10 HIGH source: CNA overview
- CWE(s)
- —
- Reserved
- —
- Published
- —
- Last updated
- —
- Source
- https://www.tenable.com/cve/CVE-2021-47945
- Linked Threat
- CVE-2021-47945 — CVE-2021-47945
NVD triage scoring NVD CVE 2.0
Layer NVD adds on top of the CNA's CVE record — published / last-modified timestamps, exploitability / impact subscores, and the FIRST.org EPSS probability that this CVE will be exploited in the wild in the next 30 days.
- NVD published
- 2026-05-10 13:16:30 UTC
- NVD last modified
- 2026-05-13 15:30:24 UTC
- NVD CVSS v3.1
- 7.8 / 10 HIGH source: disclosure@vulncheck.com
- NVD CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H- Exploitability subscore
- 1.8 / 10
- Impact subscore
- 5.9 / 10
- EPSS score
- 0.0001 (probability of exploitation in next 30 days)
- EPSS percentile
- 3.10% vs all CVEs — higher = more likely to be exploited, as of 2026-05-24
NVD-assigned CWE(s):
CWE-428
(differs from the CNA list above)
NVD / KEV / EPSS data refreshed 2026-05-24 23:59 UTC. Re-run the 🛰 Backfill from NVD button above to refresh.
European Union Vulnerability Database ENISA EUVD
ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.
- EUVD ID
-
EUVD-2021-34805 - Assigner
- VulnCheck
- Published
- May 10, 2026, 12:44:01 PM
- Updated
- May 11, 2026, 11:13:18 AM
- EUVD base score (CVSS 4.0)
-
8.5 / 10
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N - EUVD-reported EPSS
- 0.0200
- Vendors
- argus
- Products
-
Argus Surveillance DVR (Argus Surveillance DVR 4.0)
ENISA description: Argus Surveillance DVR 4.0 contains an unquoted service path vulnerability in the DVRWatchdog service that allows local attackers to escalate privileges by exploiting the service binary path. Attackers can place a malicious executable in the Program Files directory to be executed with LocalSystem privileges when the service starts.
Vendor references (0)
References embedded in the original CVE record by the assigning CNA.
None in the CVE record.
Web references (5)
DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.
- https://nvd.nist.gov/vuln/detail/CVE-2021-47945 tenable:nvd.nist.gov
- https://www.cve.org/CVERecord?id=CVE-2021-47945 tenable:www.cve.org
- https://www.exploit-db.com/exploits/50261 tenable:www.exploit-db.com
- https://www.first.org/epss/ tenable:www.first.org
- https://www.vulncheck.com/advisories/argus-surveillance-dvr-unquoted-service-path-privilege-escalation tenable:www.vulncheck.com
NVD-tagged references (2)
Reference list NVD curates from the CNA record, vendor advisories, and third-party reports. The tag chips below are NVD's analyst-assigned categories.
- https://www.exploit-db.com/exploits/50261 disclosure@vulncheck.com
- https://www.vulncheck.com/advisories/argus-surveillance-dvr-unquoted-service-path-privilege-escalation disclosure@vulncheck.com
Remediations (10)
Remediations are stored against the linked Threat row; the list below is deduplicated across both pages.
-
web:4sysops.com
Starting in April 2026, Windows updates will change the default Kerberos ticket issuance behavior to AES-SHA1 for accounts without explicit encryption settings, while RC4 can still be used where explicitly enabled. This change, driven by CVE -2026-20833, affects every Windows Server environment where service accounts or devices still rely on RC4. Any service account, NAS device, or legacy ...
2026-05-26 02:51 UTC -
web:cybersecuritynews.com
No patch has been released yet; Microsoft has instead issued a multi-step manual mitigation guide while a formal security update is prepared. Windows BitLocker Security Bypass The vulnerability originates in WinRE's handling of the BootExecute registry value under HKLM\ControlSet001\Control\Session Manager.
2026-05-26 02:51 UTC -
web:gist.github.com
Windows 11 Update Repair Tool - A direct, effective method for fixing Windows 11 update problems. Includes a batch file and a detailed user guide with SHA256 hash verification for security.
2026-05-26 02:51 UTC -
web:msrc.microsoft.com
The Microsoft Security Response Center (MSRC) investigates all reports of security vulnerabilities affecting Microsoft products and services, and provides the information here as part of the ongoing effort to help you manage security risks and help keep your systems protected.
2026-05-26 02:51 UTC -
web:pureinfotech.com
Fix Windows 11 stuck in BitLocker recovery screen To fix the issue with the BitLocker recovery screen on Windows 11, you would need another computer ( or a mobile phone) with internet access, and then follow these steps: Open your Microsoft account online. Confirm the computer's name from the list to find the recovery key.
2026-05-26 02:51 UTC -
web:windowsreport.com
It's that time of the month again: Microsoft has rolled out its Patch Tuesday updates for Windows 11 versions 23H2, 22H2, and 21H2. Windows 11 23H2 and 22H2 users will see their systems updated through KB5041585, while those on 21H2 will receive KB5041592. Post-update, your build versions will be 22621.4037, 22631.4037, and 22000.3147, respectively. The updates include quality improvements ...
2026-05-26 02:51 UTC -
web:www.notebookcheck.net
Microsoft released mitigation steps for YellowKey ( CVE -2026-45585), a BitLocker bypass that grants physical attackers access to encrypted Windows drives.
2026-05-26 02:51 UTC -
web:www.oracle.com
Critical Security Patch Updates Critical Security Patch Updates provide security patches for supported Oracle on-premises products. A Critical Security Patch Update provides targeted, high-priority security fixes in a smaller, more focused format, making them easier to apply with minimal disruption.
2026-05-26 02:51 UTC -
web:www.securityweek.com
Microsoft has announced mitigations for CVE -2026-45585, a BitLocker bypass triggered via FsTx in Windows Recovery.
2026-05-26 02:51 UTC -
web:www.techrepublic.com
Microsoft has released a temporary mitigation for YellowKey, a Windows zero-day that can reportedly bypass BitLocker protections.
2026-05-26 02:51 UTC
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.