Exploitation Summary
EIP tracks 1 public exploit for CVE-2022-50913. PoCs published by Edgar Carrillo Egea.
AI-analyzed exploit summary This is a writeup describing an unquoted service path privilege escalation vulnerability in ITeCProteccioAppServer.exe. The attacker can exploit this by placing a malicious executable in the service path, which will execute with elevated privileges upon service restart or system reboot.
Description
ITeC ITeCProteccioAppServer contains an unquoted service path vulnerability that allows local attackers to execute code with elevated system privileges. Attackers can insert a malicious executable in the service path to gain elevated access during service restart or system reboot.
Exploits (1)
This is a writeup describing an unquoted service path privilege escalation vulnerability in ITeCProteccioAppServer.exe. The attacker can exploit this by placing a malicious executable in the service path, which will execute with elevated privileges upon service restart or system reboot.
References (3)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H