CVE-2022-50918highCWE-428

VIVE Runtime Service - 'ViveAgentService' Unquoted Service Path

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 8.5epss 0.2%

probabilidad de explotación

0.2%top 93% de las CVE

explotación observada

noninguna fuente lo reporta

VIVE Runtime Service 1.0.0.4 contains an unquoted service path vulnerability that allows local users to execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted binary path by placing malicious executables in specific system directories to gain LocalSystem access during service startup.

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Productos afectados

VIVE · VIVE Runtime Service

Referencias

https://developer.vive.com/resources/downloads/https://www.exploit-db.com/exploits/50824 https://www.vive.com/https://www.vulncheck.com/advisories/vive-runtime-service-viveagentservice-unquoted-service-path