Skip to content
OpenAdvisories
High · 7.3 CVE-2023-22282 EUVD-2023-26446GHSA-6f3c-6h7q-9v52

WAB-MAT Ver.5.0.0.8 and earlier starts another program with an unquoted file path. Since a registered Windows service path contains spaces …

Published Apr 11, 2023 · Updated Feb 11, 2025 · Assigned by jpcert

Description

WAB-MAT Ver.5.0.0.8 and earlier starts another program with an unquoted file path. Since a registered Windows service path contains spaces and are unquoted, if a malicious executable is placed on a certain path, the executable may be executed with the privilege of the Windows service.

Affected products

VendorProductAffectedFixed
ELECOM WAB-MAT Ver.5.0.0.8 and earlier —

References