OSAS Traverse Extension 11 x86 TravExtensionHostSvc Service unquoted search path

Summaryinfo

A vulnerability, which was classified as problematic, was found in OSAS Traverse Extension 11 x86. Impacted is an unknown function of the component TravExtensionHostSvc Service. The manipulation results in unquoted search path. This vulnerability is cataloged as CVE-2021-47864. The attack must be initiated from a local position. Furthermore, there is an exploit available.

Detailsinfo

A vulnerability was found in OSAS Traverse Extension 11 x86. It has been classified as critical. Affected is some unknown functionality of the component TravExtensionHostSvc Service. The manipulation with an unknown input leads to a unquoted search path vulnerability. CWE is classifying the issue as CWE-428. The product uses a search path that contains an unquoted element, in which the element contains whitespace or other separators. This can cause the product to access resources in a parent path. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

OSAS Traverse Extension 11 contains an unquoted service path vulnerability in the TravExtensionHostSvc service running with LocalSystem privileges. Attackers can exploit the unquoted path to inject and execute malicious code by placing executable files in the service's path, potentially gaining elevated system access.

The weakness was shared by Tech Johnny as 49698. The advisory is shared for download at exploit-db.com. This vulnerability is traded as CVE-2021-47864 since 01/18/2026. The exploitability is told to be difficult. The attack needs to be approached locally. Technical details are unknown but a public exploit is available. The MITRE ATT&CK project declares the attack technique as T1574.009.

The exploit is shared for download at exploit-db.com. It is declared as proof-of-concept.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at Exploit-DB (49698). Once again VulDB remains the best source for vulnerability data.

Productinfo

Vendor

• OSAS

Name

• Traverse Extension

Version

• 11 x86

CPE 2.3info

• 🔒

CPE 2.2info

• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion