CVE-2022-50930: Emerson PAC Machine Edition 9.80 Build 8695 - 'TrapiServer' Unquoted Service Path
Emerson PAC Machine Edition 9.80 contains an unquoted service path vulnerability in the TrapiServer service that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in the service configuration to inject malicious code that would execute with LocalSystem permissions during service startup.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-50930?
CVE-2022-50930 is rated as a medium severity vulnerability due to its potential for local privilege escalation.
How do I fix CVE-2022-50930?
To fix CVE-2022-50930, ensure that the service paths for the TrapiServer are correctly quoted to prevent execution of arbitrary code.
Who is affected by CVE-2022-50930?
CVE-2022-50930 affects users of the Emerson PAC Machine Edition 9.80 software.
What type of vulnerability is CVE-2022-50930?
CVE-2022-50930 is an unquoted service path vulnerability that may allow for local code execution.
Can CVE-2022-50930 be exploited remotely?
CVE-2022-50930 requires local access to exploit, making it unsuitable for remote attacks.