high7.8Public exploit code
CVE-2022-35899
There is an unquoted service path in ASUSTeK Aura Ready Game SDK service (GameSDK.exe) 1.0.0.4.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Asus GameSDK v1.0.0.4 - 'GameSDK.exe' Unquoted Service Path2022-07-29 · local · windows
Impact
There is an unquoted service path in ASUSTeK Aura Ready Game SDK service (GameSDK.exe) 1.0.0.4. This might allow a local user to escalate privileges by creating a %PROGRAMFILES(X86)%\ASUS\GameSDK.exe file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Asus | Aura Ready Game Software Development Kit | Version 1.0.0.4 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/AngeloPioAmirante/CVE-2022-35899
- https://packetstormsecurity.com/files/167763/Asus-GameSDK-1.0.0.4-Unquoted-Service-Path.html
- https://www.exploit-db.com/exploits/50985
- https://github.com/AngeloPioAmirante/CVE-2022-35899
- https://packetstormsecurity.com/files/167763/Asus-GameSDK-1.0.0.4-Unquoted-Service-Path.html
- https://www.exploit-db.com/exploits/50985