High severity7.8NVD Advisory· Published Jan 13, 2026· Updated Jun 17, 2026

CVE-2022-50928

Description

BlueSoleilCS 5.4.277 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted binary path in 'C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe' to inject malicious executables and escalate privileges.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

IVT Corporation/BlueSoleilCS2 versions
cpe:2.3:a:ivtcorporation:bluesoleilcs:5.4.277:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ivtcorporation:bluesoleilcs:5.4.277:*:*:*:*:*:*:*
- (no CPE)range: = 5.4.277
IVT Corp/Bluetooth Application BlueSoleilCSv5
Range: 5.4.277

Patches

Vulnerability mechanics

References

www.exploit-db.com/exploits/50761nvdExploit
www.vulncheck.com/advisories/bluetooth-application-bluesoleilcs-unquoted-service-pathnvdThird Party Advisory
web.archive.org/web/20210624054150/http://ivtcorporation.com/nvdProduct

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000