CVE-2023-22282

2023-04-1100:00:00

jpcert

www.cve.org

cve-2023-22282

wab-mat

unquoted file path

windows service vulnerability

privilege escalation

EPSS

Percentile

9.0%

JSON

WAB-MAT Ver.5.0.0.8 and earlier starts another program with an unquoted file path. Since a registered Windows service path contains spaces and are unquoted, if a malicious executable is placed on a certain path, the executable may be executed with the privilege of the Windows service.

CNA Affected

[
  {
    "vendor": "ELECOM CO.,LTD.",
    "product": "WAB-MAT",
    "versions": [
      {
        "version": "Ver.5.0.0.8 and earlier",
        "status": "affected"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN35246979/

www.elecom.co.jp/news/security/20230324-01/

EPSS

Percentile

9.0%

JSON

Related for CVELIST:CVE-2023-22282