CVE-2022-50918: VIVE Runtime Service - 'ViveAgentService' Unquoted Service Path
VIVE Runtime Service 1.0.0.4 contains an unquoted service path vulnerability that allows local users to execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted binary path by placing malicious executables in specific system directories to gain LocalSystem access during service startup.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-50918?
CVE-2022-50918 is considered a high-severity vulnerability due to its potential for local privilege escalation.
How do I fix CVE-2022-50918?
To fix CVE-2022-50918, you should update the VIVE Runtime Service to the latest version that addresses this vulnerability.
Who is affected by CVE-2022-50918?
CVE-2022-50918 affects users of HTC VIVE Runtime Service version 1.0.0.4 who have unquoted service paths.
What type of attacks can be performed due to CVE-2022-50918?
CVE-2022-50918 allows local users to execute arbitrary code with elevated system privileges, potentially leading to system compromise.
Is CVE-2022-50918 exploitable remotely?
CVE-2022-50918 is not considered remotely exploitable as it requires local access to execute the attack.