Vulnerability Description
WOW21 5.0.1.9 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted binary path to inject malicious executables that will be launched with LocalSystem permissions during service startup.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Wow21 | Wow21 | 5.0.1.9 |
Related Weaknesses (CWE)
References
- https://web.archive.org/web/20220220170535/https://wow21.life/Product
- https://www.exploit-db.com/exploits/50818Exploit
- https://www.vulncheck.com/advisories/wow-service-wowservice-unquoted-service-patThird Party Advisory
- https://www.exploit-db.com/exploits/50818Exploit
FAQ
What is CVE-2022-50921?
CVE-2022-50921 is a vulnerability with a CVSS score of 7.8 (HIGH). WOW21 5.0.1.9 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted bina...
How severe is CVE-2022-50921?
CVE-2022-50921 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-50921?
Check the references section above for vendor advisories and patch information. Affected products include: Wow21 Wow21.