← All advisories

High severity7.8NVD Advisory· Published Jun 29, 2022· Updated Jun 17, 2026

CVE-2022-33035

CVE-2022-33035

Description

XLPD v7.0.0094 and below contains an unquoted service path vulnerability which allows local users to launch processes with elevated privileges.

Affected products

3

Netsarang/Xlpd2 versions
cpe:2.3:a:netsarang:xlpd:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:netsarang:xlpd:*:*:*:*:*:*:*:*range: <7.0.0103
- (no CPE)range: <=7.0.0094
XLPD/XLPDdescription

Patches

Vulnerability mechanics

References

2

github.com/ycdxsb/Vuln/blob/main/Xlpd-Unquoted-Service-Path/XLpd-Unquoted-Service-Path.mdnvdExploitThird Party Advisory
www.netsarang.com/en/xlpd-update-history/nvdRelease NotesVendor Advisory

News mentions

0

No linked articles in our index yet.