CVE-2022-50808

8.5 highEPSS 0.2%

High (8.5). EPSS 0.2% chance of exploitation in the next 30 days.

CoolerMaster MasterPlus 1.8.5 contains an unquoted service path vulnerability in the MPService that allows local attackers to execute code with elevated system privileges. Attackers can drop a malicious executable in the service path and trigger code execution during service startup or system reboot.

Severity

CVSS 4.0

8.5 high

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CVSS 3.1

8.4 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 4% of CVEs (scores of 2026-10-31)
CWE: CWE-427
Published: 2026-01-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://masterplus.coolermaster.com/
https://www.exploit-db.com/exploits/51159
https://www.vulncheck.com/advisories/coolermaster-masterplus-mpservice-unquoted-service-path

Check your stack JSON