Vulnerability Description
Cain & Abel 4.9.56 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated privileges. Attackers can exploit the unquoted binary path to inject malicious executables that will be launched with LocalSystem permissions.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Malavida | Cain \& Abel | 4.9.56 |
Related Weaknesses (CWE)
References
- https://www.exploit-db.com/exploits/50728Exploit
- https://www.malavida.com/en/soft/cain-and-abelBroken Link
- https://www.vulncheck.com/advisories/cain-abel-unquoted-service-pathThird Party Advisory
- https://www.exploit-db.com/exploits/50728Exploit
FAQ
What is CVE-2022-50933?
CVE-2022-50933 is a vulnerability with a CVSS score of 7.8 (HIGH). Cain & Abel 4.9.56 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated privileges. Attackers can exploit the unquoted binary...
How severe is CVE-2022-50933?
CVE-2022-50933 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-50933?
Check the references section above for vendor advisories and patch information. Affected products include: Malavida Cain \& Abel.