CVE-2021-47985 - Brother SAPSprint 7.60 Unquoted Service Path Privilege Escalation

Back Back to CVE browser

HIGH

Brother SAPSprint 7.60 Unquoted Service Path Privilege Escalation

Published Jun 19, 2026

8.5

HIGH

CVSS 4.0

EPSS 0.17%

Description

Brother SAPSprint 7.60 contains an unquoted service path vulnerability in the SAPSprint service binary that allows local attackers to escalate privileges. Attackers can place a malicious executable in the Program Files directory path to be executed with LocalSystem privileges when the service starts automatically.

Affected products

Vendor Brother Product SAPSprint Default
n/a
- Version
  7.60
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Brother

SAPSprint

n/a

Version	Status	Constraints
7.60	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-428

References (4)

https://brother.com/
product
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-34851
Advisory
https://www.exploit-db.com/exploits/50061
exploit
https://www.vulncheck.com/advisories/brother-sapsprint-unquoted-service-path-privilege-escalation
third-party-advisory

Link	Providers	Tags
https://brother.com/		product
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-34851		Advisory
https://www.exploit-db.com/exploits/50061		exploit
https://www.vulncheck.com/advisories/brother-sapsprint-unquoted-service-path-privilege-escalation		third-party-advisory