Exploitation Summary
EIP tracks 1 public exploit for CVE-2022-50923. PoCs published by Hejap Zairy Al-Sharif.
AI-analyzed exploit summary This is a writeup describing an unquoted service path vulnerability in Cobian Backup 0.9. The exploit leverages the lack of quotes around the service path to potentially execute arbitrary code with elevated privileges if a malicious executable is placed in the system root path.
Description
Cobian Backup 0.9 contains an unquoted service path vulnerability that allows local users to execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted binary path in the CobianReflectorService to inject malicious code that will execute with LocalSystem permissions during service startup.
Exploits (1)
This is a writeup describing an unquoted service path vulnerability in Cobian Backup 0.9. The exploit leverages the lack of quotes around the service path to potentially execute arbitrary code with elevated privileges if a malicious executable is placed in the system root path.
References (4)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H