QwikSec

Security Database

CVE

CWE

Training

CVE-2021-47869

Published: Jan 21, 2026

Modified: Jan 22, 2026

PUBLISHED

CVSS v3.1

7.8

HIGH

Description

Brother BRAdmin Professional 3.75 contains an unquoted service path vulnerability in the BRA_Scheduler service that allows local users to potentially execute arbitrary code. Attackers can place a malicious executable named 'BRAdmin' in the C:\Program Files (x86)\Brother\ directory to gain local system privileges.

Vendor	Product	Versions
Brother Industries, Ltd.	BRAdmin Professional	affected `3.75.0000`

Weaknesses (CWE)

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

References

ExploitDB-49671

exploit

Brother Global Homepage

product

Brother Software Download Page

product

Vulnerability Technical Details

technical-description

VulnCheck Advisory: BRAdmin Professional 3.75 - 'BRA_Scheduler' Unquoted Service Path

third-party-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.