CVE-2022-50935: FLAME II MODEM USB - Unquoted Service Path
Published Jan 13, 2026
·Updated
Flame II HSPA USB Modem contains an unquoted service path vulnerability in its Windows service configuration. Attackers can exploit the unquoted path in 'C:\Program Files (x86)\Internet Telcel\ApplicationController.exe' to execute arbitrary code with elevated system privileges.
Affected Software
1 affected component
FLAME Flame II HSPA USB Modem
Event History
Jan 13, 2026
CVE Published
via MITRE·10:52 PM
Data Sourced
via MITRE·10:52 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·11:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-50935?
CVE-2022-50935 is classified as a high-severity vulnerability due to its potential to allow arbitrary code execution.
2
How do I fix CVE-2022-50935?
To fix CVE-2022-50935, you should update the service configuration to use a properly quoted service path.
3
What software is affected by CVE-2022-50935?
CVE-2022-50935 affects the FLAME Flame II HSPA USB Modem.
4
What type of vulnerability is CVE-2022-50935?
CVE-2022-50935 is an unquoted service path vulnerability.
5
What can attackers do with CVE-2022-50935?
Attackers can exploit CVE-2022-50935 to execute arbitrary code with elevated privileges.