CVE-2022-23909
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 1.0%
from disclosure to weapon1 days
Published on NVDApr 5
1st PoC+1d
exploitation probability
1.0%top 40% of all CVEs
observed exploitation
nono source reports it
3 public exploit(s)
There is an unquoted service path in Sherpa Connector Service (SherpaConnectorService.exe) 2020.2.20328.2050. This might allow a local user to escalate privileges by creating a "C:\Program Files\Sherpa Software\Sherpa.exe" file.
Affected products
n/a · n/apublic PoCs found — 3
exploitdbwww.exploit-db.com/exploits/50852unverifiedgithubgithub.com/netsectuna/CVE-2022-23909★ 3cve_referencepacketstormsecurity.com/files/166574/Sherpa-Connector-Service-2020.2.20328.2050-Unquoted-Service-Path.htmlunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.