CVE-2022-50808

This exploit describes an unquoted service path vulnerability in CoolerMaster MasterPlus 1.8.5, where the service path lacks quotes, allowing potential privilege escalation via executable placement in a parent directory. The writeup includes steps to identify the vulnerability and exploit it by placing a malicious executable in the root of C:\.