CVE-2022-50935

CRITICAL

Flame II HSPA USB Modem - Privilege Escalation

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2022-50935. PoCs published by Ismael Nava.

AI-analyzed exploit summary This is a writeup detailing an unquoted service path vulnerability in the FLAME II HSPA USB MODEM Service. The vulnerability allows local privilege escalation due to the service path containing spaces and not being enclosed in quotes.

Description

Flame II HSPA USB Modem contains an unquoted service path vulnerability in its Windows service configuration. Attackers can exploit the unquoted path in 'C:\Program Files (x86)\Internet Telcel\ApplicationController.exe' to execute arbitrary code with elevated system privileges.

Exploits (1)

exploitdb WRITEUP
by Ismael Nava · textlocalwindows
https://www.exploit-db.com/exploits/50708

This is a writeup detailing an unquoted service path vulnerability in the FLAME II HSPA USB MODEM Service. The vulnerability allows local privilege escalation due to the service path containing spaces and not being enclosed in quotes.

Classification
Writeup 90%
Attack Type
Lpe
Complexity
Trivial
Reliability
Reliable
Target: FLAME II HSPA USB MODEM Service (Alcatel X602A)
Auth required
Prerequisites: Local access to the system · Ability to write to the directory containing the executable
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3

Scores

CVSS v3 9.8
EPSS 0.0036
EPSS Percentile 27.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-428
Status published
Products (1)
Telcel/FLAME II MODEM USB
Published Jan 13, 2026
Tracked Since Feb 18, 2026