Active Webcam 115 Unquoted Service Path Patched -
Active WebCam by PY Software is a utility that turns a standard PC webcam into a multi-channel streaming and surveillance system. It runs as a Windows service to allow continuous background recording, motion detection, and remote viewing.
Run the following command to list services that have spaces in their paths but are not quoted:
Security analysts can audit networks for remaining unquoted service paths using a simple built-in Windows Management Instrumentation (WMI) query: active webcam 115 unquoted service path patched
The attacker must possess write permissions to one of the parent folders (e.g., C:\ or C:\Program Files\ ). By default, modern Windows installations restrict standard users from writing to these directories, but misconfigured permissions or older OS environments often left these paths open.
Get-WmiObject win32_service | Where-Object $_.PathName -notlike '"*' -and $_.PathName -like '* *' | Select Name, PathName Active WebCam by PY Software is a utility
Unquoted service paths are a well-documented vulnerability class. For legacy software like , taking proactive steps to patch the service path in the Windows Registry is essential for system security. If you are unable to patch the service, consider upgrading to a more modern, maintained surveillance solution.
Active Webcam 11.5 (developed by PY Software) contains a high-risk security vulnerability known as an Unquoted Service Path This flaw is officially tracked as CVE-2021-47790 and was first publicly documented in September 2021 Exploit-DB Vulnerability Overview: CVE-2021-47790 If you are unable to patch the service,
Technical impact
The configuration for all Windows services resides in the Registry. You can manually correct the Active Webcam path using the Registry Editor ( regedit ). Press Win + R , type regedit , and hit Enter.
The patching of Active WebCam 115 removes a reliable local privilege escalation vector. However, system administrators should use this as a reminder: . Always enclose paths with spaces in double quotes, and regularly scan Windows services for this misconfiguration.
While this specific vulnerability was publicly disclosed and verified (EDB-ID 50273), standard remediation involves manually or programmatically updating the Windows Registry. CVE-2021-47790 Detail - NVD
