CVE-2023-22282

Severity: high (CVSS 7.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-04-11 · updated 2026-06-17
Weakness: CWE-428

Description

WAB-MAT Ver.5.0.0.8 and earlier starts another program with an unquoted file path. Since a registered Windows service path contains spaces and are unquoted, if a malicious executable is placed on a certain path, the executable may be executed with the privilege of the Windows service.

Affected products

ELECOM CO.,LTD. WAB-MAT: before 5.0.2.2 — fixed in 5.0.2.2

How to fix

Upgrade to a fixed version: ELECOM CO.,LTD. WAB-MAT 5.0.2.2. Check the vendor advisory for mitigations.

References

https://jvn.jp/en/jp/JVN35246979/
https://www.elecom.co.jp/news/security/20230324-01/
https://jvn.jp/en/jp/JVN35246979/
https://www.elecom.co.jp/news/security/20230324-01/

Get alerted when CVE-2023-22282 or the next vulnerability affects your stack