CVE-2022-50928

Name of the Vulnerable Software and Affected Versions BlueSoleilCS version 5.4.277

Description BlueSoleilCS version 5.4.277 has a security issue related to an unquoted service path in its Windows service configuration. This could allow local attackers to execute arbitrary code. The vulnerable path is located at 'C:Program FilesIVT CorporationBlueSoleilBlueSoleilCS.exe'. An attacker can exploit this by injecting malicious executables and potentially gaining elevated privileges.

Recommendations Update BlueSoleilCS to a version that addresses this unquoted service path issue. As a temporary workaround, restrict access to the 'C:Program FilesIVT CorporationBlueSoleilBlueSoleilCS.exe' file to minimize the risk of exploitation.