CVE-2022-35899

Katalog CVE

CVSS 7.8 · High EPSS 0,90%

Kerentanan Unquoted Search Path or Element pada asus aura ready game software development kit. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

There is an unquoted service path in ASUSTeK Aura Ready Game SDK service (GameSDK.exe) 1.0.0.4. This might allow a local user to escalate privileges by creating a %PROGRAMFILES(X86)%\ASUS\GameSDK.exe file.

Rincian

Terbit di NVD

21 Juli 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-428: Unquoted Search Path or Element

EPSS (30 hari)

0,90% peluang dieksploitasi; lebih tinggi dari 58,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/AngeloPioAmirante/CVE-2022-35899 exploit · advisory pihak ketiga
• https://packetstormsecurity.com/files/167763/Asus-GameSDK-1.0.0.4-Unquoted-Service-Path.html exploit · advisory pihak ketiga · vdb entry
• https://www.exploit-db.com/exploits/50985 exploit · advisory pihak ketiga · vdb entry