Approved changes feed: RSS · Atom

cpe:2.3:a:honeywell:win-pak:4.8:*:*:*:*:*:*:*

part: a version: 4.8 update: *

VendorHoneywell (98681534-528d-57d2-bf2a-17f1d63c09c9)
ProductWin Pak (b336d362-3455-57bc-979f-91a0819f77bd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-47868 vulnerable 2026-06-08 05:38:07.813898 WIN-PACK PRO 4.8 - 'WPCommandFileService' Unquoted Service Path
HIGH (7.8)
WIN-PACK PRO 4.8 contains an unquoted service path vulnerability in the WPCommandFileService that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files <x86>\WINPAKPRO\WPCommandFileService Service.exe to inject malicious code that would execute with LocalSystem permissions.
Published: 2026-01-21T17:27:45.785Z
Updated: 2026-03-05T01:29:00.395Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-47866 vulnerable 2026-06-08 05:38:07.812252 WIN-PACK PRO 4.8 - 'GuardTourService' Unquoted Service Path
HIGH (7.8)
WIN-PACK PRO 4.8 contains an unquoted service path vulnerability in the GuardTourService that allows local users to potentially execute code with elevated system privileges. Attackers can exploit the unquoted path in C:\Program Files <x86>\WINPAKPRO\WP GuardTour Service.exe to inject malicious code that would execute during service startup.
Published: 2026-01-21T17:27:44.672Z
Updated: 2026-03-05T01:28:59.472Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.