{"vulnerability": "CVE-2022-35899", "sightings": [{"uuid": "c36e86da-9c3b-468d-a098-adeb81824c2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35899", "type": "seen", "source": "https://t.me/cibsecurity/46761", "content": "\u203c CVE-2022-35899 \u203c\n\nThere is an unquoted service path in ASUSTeK Aura Ready Game SDK service (GameSDK.exe) 1.0.0.4. This might allow a local user to escalate privileges by creating a %PROGRAMFILES(X86)%\\ASUS\\GameSDK.exe file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-07-22T05:58:55.000000Z"}, {"uuid": "41386060-824c-40ff-922f-2b39e932fb0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35899", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/144", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-35899\nGithub: https://github.com/AngeloPioAmirante/CVE-2022-35899\nDescribe: \nThere is an unquoted service path in ASUSTeK Aura Ready Game SDK service (GameSDK.exe) 1.0.0.4. This might allow a local user to escalate privileges by creating a %PROGRAMFILES(X86)%\\ASUS\\GameSDK.exe file.", "creation_timestamp": "2026-07-18T18:00:04.329063Z"}, {"uuid": "6079ff90-abe3-4c6b-bc96-648aad61a050", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35899", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/144", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-35899\nGithub: https://github.com/AngeloPioAmirante/CVE-2022-35899\nDescribe: \nThere is an unquoted service path in ASUSTeK Aura Ready Game SDK service (GameSDK.exe) 1.0.0.4. This might allow a local user to escalate privileges by creating a %PROGRAMFILES(X86)%\\ASUS\\GameSDK.exe file.", "creation_timestamp": "2026-07-19T00:00:10.820917Z"}, {"uuid": "4a57455f-6fde-477e-b747-a520ea663026", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35899", "type": "seen", "source": "https://t.me/hacking_Attack/62127", "content": "Exploit Collector\nAsus GameSDK 1.0.0.4 Unquoted Service Path\n\nhttps://3.bp.blogspot.com/-Qhp4qePCt4w/WWlvgnoLBHI/AAAAAAAAIQQ/Pg-5D4V1nfk8Sq6EZO_I88mZqTiN0MsZgCLcBGAs/s1600/h89.png \nAsus GameSDK version 1.0.0.4 suffers from an unquoted service path vulnerability in GameSDK.exe.\n\nSHA-256 | cd88ac76d033405e5a3e34567ef8fd43237dddbf5f9d43a3e92a2f447d70a461\n\nDownload\n# Exploit Title: Asus GameSDK v1.0.0.4 - 'GameSDK.exe' Unquoted Service Path (Privilege Escalation)\n# Date: 07/14/2022\n# Exploit Author: Angelo Pio Amirante\n# Version: 1.0.0.4\n# Tested on: Windows 10\n# Patched version: 1.0.5.0\n# CVE: CVE-2022-35899\n# Step to discover the unquoted service path:\n\nwmic service get name,displayname,pathname,startmode | findstr /i \"auto\" | findstr /i /v \"c:\\windows\\\\\" | findstr /i /v \"\"\"\n\n# Info on the service:\n\nC:\\>sc qc \"GameSDK Service\"\n[SC] QueryServiceConfig OPERAZIONI RIUSCITE\n\nNOME_SERVIZIO: GameSDK Service\nTIPO                      : 10  WIN32_OWN_PROCESS\nTIPO_AVVIO                : 2   AUTO_START\nCONTROLLO_ERRORE          : 1   NORMAL\nNOME_PERCORSO_BINARIO     : C:\\Program Files (x86)\\ASUS\\GameSDK Service\\GameSDK.exe\nGRUPPO_ORDINE_CARICAMENTO :\nTAG                       : 0\nNOME_VISUALIZZATO         : GameSDK Service\nDIPENDENZE                :\nSERVICE_START_NAME : LocalSystem\n\n# Exploit\nIf an attacker had already compromised the system and the current user has the privileges to write in the \"C:\\Program Files (x86)\\ASUS\\\" folder or in \"C:\\\" , he could place his own \"Program.exe\" or \"GameSDK.exe\" files respectively, and when the service starts, it would launch the malicious file, rather than the original \"GameSDK.exe\".\n\n# Impact\nAn attacker can elevate his privileges on the system and become NTAUTHORITY\\SYSTEM.\n\n# Poc Video\n\nhttps://youtu.be/u_8JMIgn-5g\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:34.504511Z"}, {"uuid": "4cd71956-e690-405e-a271-20886c90c21d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35899", "type": "seen", "source": "https://t.me/hacking_Attack/62127", "content": "Exploit Collector\nAsus GameSDK 1.0.0.4 Unquoted Service Path\n\nhttps://3.bp.blogspot.com/-Qhp4qePCt4w/WWlvgnoLBHI/AAAAAAAAIQQ/Pg-5D4V1nfk8Sq6EZO_I88mZqTiN0MsZgCLcBGAs/s1600/h89.png \nAsus GameSDK version 1.0.0.4 suffers from an unquoted service path vulnerability in GameSDK.exe.\n\nSHA-256 | cd88ac76d033405e5a3e34567ef8fd43237dddbf5f9d43a3e92a2f447d70a461\n\nDownload\n# Exploit Title: Asus GameSDK v1.0.0.4 - 'GameSDK.exe' Unquoted Service Path (Privilege Escalation)\n# Date: 07/14/2022\n# Exploit Author: Angelo Pio Amirante\n# Version: 1.0.0.4\n# Tested on: Windows 10\n# Patched version: 1.0.5.0\n# CVE: CVE-2022-35899\n# Step to discover the unquoted service path:\n\nwmic service get name,displayname,pathname,startmode | findstr /i \"auto\" | findstr /i /v \"c:\\windows\\\\\" | findstr /i /v \"\"\"\n\n# Info on the service:\n\nC:\\>sc qc \"GameSDK Service\"\n[SC] QueryServiceConfig OPERAZIONI RIUSCITE\n\nNOME_SERVIZIO: GameSDK Service\nTIPO                      : 10  WIN32_OWN_PROCESS\nTIPO_AVVIO                : 2   AUTO_START\nCONTROLLO_ERRORE          : 1   NORMAL\nNOME_PERCORSO_BINARIO     : C:\\Program Files (x86)\\ASUS\\GameSDK Service\\GameSDK.exe\nGRUPPO_ORDINE_CARICAMENTO :\nTAG                       : 0\nNOME_VISUALIZZATO         : GameSDK Service\nDIPENDENZE                :\nSERVICE_START_NAME : LocalSystem\n\n# Exploit\nIf an attacker had already compromised the system and the current user has the privileges to write in the \"C:\\Program Files (x86)\\ASUS\\\" folder or in \"C:\\\" , he could place his own \"Program.exe\" or \"GameSDK.exe\" files respectively, and when the service starts, it would launch the malicious file, rather than the original \"GameSDK.exe\".\n\n# Impact\nAn attacker can elevate his privileges on the system and become NTAUTHORITY\\SYSTEM.\n\n# Poc Video\n\nhttps://youtu.be/u_8JMIgn-5g\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:44.246253Z"}, {"uuid": "d7d054b9-53b4-4239-96b1-7ff2b0427f4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35899", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/62127", "content": "Exploit Collector\nAsus GameSDK 1.0.0.4 Unquoted Service Path\n\nhttps://3.bp.blogspot.com/-Qhp4qePCt4w/WWlvgnoLBHI/AAAAAAAAIQQ/Pg-5D4V1nfk8Sq6EZO_I88mZqTiN0MsZgCLcBGAs/s1600/h89.png \nAsus GameSDK version 1.0.0.4 suffers from an unquoted service path vulnerability in GameSDK.exe.\n\nSHA-256 | cd88ac76d033405e5a3e34567ef8fd43237dddbf5f9d43a3e92a2f447d70a461\n\nDownload\n# Exploit Title: Asus GameSDK v1.0.0.4 - 'GameSDK.exe' Unquoted Service Path (Privilege Escalation)\n# Date: 07/14/2022\n# Exploit Author: Angelo Pio Amirante\n# Version: 1.0.0.4\n# Tested on: Windows 10\n# Patched version: 1.0.5.0\n# CVE: CVE-2022-35899\n# Step to discover the unquoted service path:\n\nwmic service get name,displayname,pathname,startmode | findstr /i \"auto\" | findstr /i /v \"c:\\windows\\\\\" | findstr /i /v \"\"\"\n\n# Info on the service:\n\nC:\\>sc qc \"GameSDK Service\"\n[SC] QueryServiceConfig OPERAZIONI RIUSCITE\n\nNOME_SERVIZIO: GameSDK Service\nTIPO                      : 10  WIN32_OWN_PROCESS\nTIPO_AVVIO                : 2   AUTO_START\nCONTROLLO_ERRORE          : 1   NORMAL\nNOME_PERCORSO_BINARIO     : C:\\Program Files (x86)\\ASUS\\GameSDK Service\\GameSDK.exe\nGRUPPO_ORDINE_CARICAMENTO :\nTAG                       : 0\nNOME_VISUALIZZATO         : GameSDK Service\nDIPENDENZE                :\nSERVICE_START_NAME : LocalSystem\n\n# Exploit\nIf an attacker had already compromised the system and the current user has the privileges to write in the \"C:\\Program Files (x86)\\ASUS\\\" folder or in \"C:\\\" , he could place his own \"Program.exe\" or \"GameSDK.exe\" files respectively, and when the service starts, it would launch the malicious file, rather than the original \"GameSDK.exe\".\n\n# Impact\nAn attacker can elevate his privileges on the system and become NTAUTHORITY\\SYSTEM.\n\n# Poc Video\n\nhttps://youtu.be/u_8JMIgn-5g\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-05T15:00:06.621253Z"}, {"uuid": "286657de-3ed1-4f5a-9cc1-c15590f027bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35899", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/62127", "content": "Exploit Collector\nAsus GameSDK 1.0.0.4 Unquoted Service Path\n\nhttps://3.bp.blogspot.com/-Qhp4qePCt4w/WWlvgnoLBHI/AAAAAAAAIQQ/Pg-5D4V1nfk8Sq6EZO_I88mZqTiN0MsZgCLcBGAs/s1600/h89.png \nAsus GameSDK version 1.0.0.4 suffers from an unquoted service path vulnerability in GameSDK.exe.\n\nSHA-256 | cd88ac76d033405e5a3e34567ef8fd43237dddbf5f9d43a3e92a2f447d70a461\n\nDownload\n# Exploit Title: Asus GameSDK v1.0.0.4 - 'GameSDK.exe' Unquoted Service Path (Privilege Escalation)\n# Date: 07/14/2022\n# Exploit Author: Angelo Pio Amirante\n# Version: 1.0.0.4\n# Tested on: Windows 10\n# Patched version: 1.0.5.0\n# CVE: CVE-2022-35899\n# Step to discover the unquoted service path:\n\nwmic service get name,displayname,pathname,startmode | findstr /i \"auto\" | findstr /i /v \"c:\\windows\\\\\" | findstr /i /v \"\"\"\n\n# Info on the service:\n\nC:\\>sc qc \"GameSDK Service\"\n[SC] QueryServiceConfig OPERAZIONI RIUSCITE\n\nNOME_SERVIZIO: GameSDK Service\nTIPO                      : 10  WIN32_OWN_PROCESS\nTIPO_AVVIO                : 2   AUTO_START\nCONTROLLO_ERRORE          : 1   NORMAL\nNOME_PERCORSO_BINARIO     : C:\\Program Files (x86)\\ASUS\\GameSDK Service\\GameSDK.exe\nGRUPPO_ORDINE_CARICAMENTO :\nTAG                       : 0\nNOME_VISUALIZZATO         : GameSDK Service\nDIPENDENZE                :\nSERVICE_START_NAME : LocalSystem\n\n# Exploit\nIf an attacker had already compromised the system and the current user has the privileges to write in the \"C:\\Program Files (x86)\\ASUS\\\" folder or in \"C:\\\" , he could place his own \"Program.exe\" or \"GameSDK.exe\" files respectively, and when the service starts, it would launch the malicious file, rather than the original \"GameSDK.exe\".\n\n# Impact\nAn attacker can elevate his privileges on the system and become NTAUTHORITY\\SYSTEM.\n\n# Poc Video\n\nhttps://youtu.be/u_8JMIgn-5g\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T00:00:43.910847Z"}]}