cve/2022/CVE-2022-23909.md

CVE-2022-23909

Description

There is an unquoted service path in Sherpa Connector Service (SherpaConnectorService.exe) 2020.2.20328.2050. This might allow a local user to escalate privileges by creating a "C:\Program Files\Sherpa Software\Sherpa.exe" file.

POC

Reference

• http://packetstormsecurity.com/files/166574/Sherpa-Connector-Service-2020.2.20328.2050-Unquoted-Service-Path.html

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/NaInSec/CVE-PoC-in-GitHub
• https://github.com/SYRTI/POC_to_review
• https://github.com/WhooAmii/POC_to_review
• https://github.com/k0mi-tg/CVE-POC
• https://github.com/karimhabush/cyberowl
• https://github.com/manas3c/CVE-POC
• https://github.com/netsectuna/CVE-2022-23909
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/trhacknon/Pocingit
• https://github.com/whoforget/CVE-POC
• https://github.com/youwizard/CVE-POC
• https://github.com/zecool/cve