Exploitation Summary
EIP tracks 1 public exploit for CVE-2022-50918. PoCs published by Faisal Alasmari.
AI-analyzed exploit summary This is a writeup describing an unquoted service path vulnerability in VIVE Runtime Service. The exploit leverages the lack of quotes around the executable path to potentially execute arbitrary code with elevated privileges if a malicious executable is placed in the system root path.
Description
VIVE Runtime Service 1.0.0.4 contains an unquoted service path vulnerability that allows local users to execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted binary path by placing malicious executables in specific system directories to gain LocalSystem access during service startup.
Exploits (1)
This is a writeup describing an unquoted service path vulnerability in VIVE Runtime Service. The exploit leverages the lack of quotes around the executable path to potentially execute arbitrary code with elevated privileges if a malicious executable is placed in the system root path.
References (4)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H