What’s Vulnerable › Vulnerabilities

CVE-2022-50808: CoolerMaster MasterPlus 1.8.5 - 'MPService' Unquoted Service Path

• Severity: high (CVSS 8.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-01-13 · updated 2026-06-17
• Weakness: CWE-427

Description

CoolerMaster MasterPlus 1.8.5 contains an unquoted service path vulnerability in the MPService that allows local attackers to execute code with elevated system privileges. Attackers can drop a malicious executable in the service path and trigger code execution during service startup or system reboot.

Affected products

• Cooler Master Technology Inc. Cooler Master MasterPlus: 1.8.5

References

• https://masterplus.coolermaster.com/
• https://www.exploit-db.com/exploits/51159
• https://www.vulncheck.com/advisories/coolermaster-masterplus-mpservice-unquoted-service-path

Get alerted when CVE-2022-50808 or the next vulnerability affects your stack