CVE-2022-50928

High CVSS: 8.5

BlueSoleilCS 5.4.277 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted binary path in 'C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe' to inject malicious executables and escalate privileges.

Vendor

Ivtcorporation

Product

Bluesoleilcs

CWE

CWE-428

Yayın Tarihi

2026-01-13 23:15:57

Güncelleme

2026-02-02 16:16:16

Source Identifier

disclosure@vulncheck.com

KEV Date Added

Kategoriler

CWE-428 Bluesoleilcs HIGH Ivtcorporation 2026

Referanslar

https://web.archive.org/web/20210624054150/http://ivtcorporation.com/ https://www.exploit-db.com/exploits/50761 https://www.vulncheck.com/advisories/bluetooth-application-bluesoleilcs-unquoted-service-path https://www.exploit-db.com/exploits/50761