CVE-2023-22282
High
Description
WAB-MAT Ver.5.0.0.8 and earlier starts another program with an unquoted file path. Since a registered Windows service path contains spaces and are unquoted, if a malicious executable is placed on a certain path, the executable may be executed with the privilege of the Windows service.
SeverityHigh
CVSS7.3
Exploit probability—
ProductElecom Wab-mat
PublishedApr 11, 2023
First seenApr 11, 2023
Weakness typeCWE-428CWE-428
How to fix
Update
- elecom wab-mat5.0.2.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| elecom wab-mat | v < 5.0.2.2 | 5.0.2.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.