CVE-2022-50904: Wondershare UBackit 2.0.5 - 'wsbackup' Unquoted Service Path
Wondershare UBackit 2.0.5 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted path in the wsbackup service to inject malicious executables that would run with LocalSystem permissions during service startup.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-50904?
CVE-2022-50904 is considered a high severity vulnerability due to the potential for local users to execute arbitrary code with elevated privileges.
How can I mitigate CVE-2022-50904?
To mitigate CVE-2022-50904, ensure that the service path for 'wsbackup' is quoted correctly in the Windows Service configuration.
Who is affected by CVE-2022-50904?
CVE-2022-50904 affects all versions of Wondershare UBackit prior to the security fix for this vulnerability.
What type of vulnerability is CVE-2022-50904?
CVE-2022-50904 is classified as an unquoted service path vulnerability that can lead to privilege escalation.
Is there a patch available for CVE-2022-50904?
Yes, Wondershare has released a patch to fix CVE-2022-50904, which should be applied to affected installations.