{"vulnerability": "CVE-2022-37197", "sightings": [{"uuid": "69d20f7f-011e-4d3c-874f-fc78bd3c9d32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-37197", "type": "seen", "source": "https://t.me/cibsecurity/53191", "content": "\u203c CVE-2022-37197 \u203c\n\nIOBit IOTransfer V4 is vulnerable to Unquoted Service Path.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-19T00:29:50.000000Z"}, {"uuid": "56392bb8-4a88-42d7-920f-8f1d2fa7dd22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-37197", "type": "seen", "source": "https://t.me/hacking_Attack/76216", "content": "Exploit Collector\nIOTransfer 4 Unquoted Service Path\n\nhttps://4.bp.blogspot.com/-hp3wB9AXd0k/WWlvDY5V44I/AAAAAAAAIKs/ScSIhWVAvDAhjeMkIwqbNby9r3gKQvOEgCLcBGAs/s1600/h128.png \nIOTransfer version 4 suffers from an unquoted service path vulnerability.\n\nSHA-256 | 2515cc0396c9fe28d6463554e021cf6e157431616218c48cd4778c46dd153be4\n\nDownload\n# Exploit Title: IOTransfer V4 - Unquoted Service Path\n# Exploit Author: BLAY ABU SAFIAN (Inveteck Global)\n# Discovery Date: 2022-28-07\n# Vendor Homepage: http://www.iobit.com/en/index.php\n# Software Link: https://iotransfer.itopvpn.com/download/\n# Tested Version: V4\n# Vulnerability Type: Unquoted Service Path\n# Tested on OS: Microsoft Windows Server 2019 Standard Evaluation CVE-2022-37197\n# Step to discover Unquoted Service Path:\n\nC:\\>wmic service get name,displayname,pathname,startmode |findstr /i \"auto\" |findstr /i /v \"c:\\windows\\\\\" |findstr /i /v \"\"\"\n\nIOTransfer Updater IOTUpdaterSvc C:\\Program Files (x86)\\IOTransfer\\Updater\\IOTUpdater.exe\nAuto\n\nC:\\>sc qc IOTUpdaterSvc\n[SC] QueryServiceConfig SUCCESS\n\nSERVICE_NAME: IOTUpdaterSvc\nTYPE : 10 WIN32_OWN_PROCESS\nSTART_TYPE : 2 AUTO_START\nERROR_CONTROL : 1 NORMAL\nBINARY_PATH_NAME : C:\\Program Files (x86)\\IOTransfer\\Updater\\IOTUpdater.exe\nLOAD_ORDER_GROUP :\nTAG : 0\nDISPLAY_NAME : IOTransfer Updater\nDEPENDENCIES :\nSERVICE_START_NAME : LocalSystem\n\nC:\\>systeminfo\n\nOS Name: Microsoft Windows Server 2019 Standard Evaluation\nOS Version: 10.0.17763 N/A Build 17763\nOS Manufacturer: Microsoft Corporation\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:19.145350Z"}, {"uuid": "4bca21ef-c0b2-41f1-80d2-c2ebb08f58af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-37197", "type": "seen", "source": "https://t.me/hacking_Attack/76216", "content": "Exploit Collector\nIOTransfer 4 Unquoted Service Path\n\nhttps://4.bp.blogspot.com/-hp3wB9AXd0k/WWlvDY5V44I/AAAAAAAAIKs/ScSIhWVAvDAhjeMkIwqbNby9r3gKQvOEgCLcBGAs/s1600/h128.png \nIOTransfer version 4 suffers from an unquoted service path vulnerability.\n\nSHA-256 | 2515cc0396c9fe28d6463554e021cf6e157431616218c48cd4778c46dd153be4\n\nDownload\n# Exploit Title: IOTransfer V4 - Unquoted Service Path\n# Exploit Author: BLAY ABU SAFIAN (Inveteck Global)\n# Discovery Date: 2022-28-07\n# Vendor Homepage: http://www.iobit.com/en/index.php\n# Software Link: https://iotransfer.itopvpn.com/download/\n# Tested Version: V4\n# Vulnerability Type: Unquoted Service Path\n# Tested on OS: Microsoft Windows Server 2019 Standard Evaluation CVE-2022-37197\n# Step to discover Unquoted Service Path:\n\nC:\\>wmic service get name,displayname,pathname,startmode |findstr /i \"auto\" |findstr /i /v \"c:\\windows\\\\\" |findstr /i /v \"\"\"\n\nIOTransfer Updater IOTUpdaterSvc C:\\Program Files (x86)\\IOTransfer\\Updater\\IOTUpdater.exe\nAuto\n\nC:\\>sc qc IOTUpdaterSvc\n[SC] QueryServiceConfig SUCCESS\n\nSERVICE_NAME: IOTUpdaterSvc\nTYPE : 10 WIN32_OWN_PROCESS\nSTART_TYPE : 2 AUTO_START\nERROR_CONTROL : 1 NORMAL\nBINARY_PATH_NAME : C:\\Program Files (x86)\\IOTransfer\\Updater\\IOTUpdater.exe\nLOAD_ORDER_GROUP :\nTAG : 0\nDISPLAY_NAME : IOTransfer Updater\nDEPENDENCIES :\nSERVICE_START_NAME : LocalSystem\n\nC:\\>systeminfo\n\nOS Name: Microsoft Windows Server 2019 Standard Evaluation\nOS Version: 10.0.17763 N/A Build 17763\nOS Manufacturer: Microsoft Corporation\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:34.038390Z"}, {"uuid": "c9100dc2-18d2-44fe-b52e-8fd160b698ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-37197", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/76216", "content": "Exploit Collector\nIOTransfer 4 Unquoted Service Path\n\nhttps://4.bp.blogspot.com/-hp3wB9AXd0k/WWlvDY5V44I/AAAAAAAAIKs/ScSIhWVAvDAhjeMkIwqbNby9r3gKQvOEgCLcBGAs/s1600/h128.png \nIOTransfer version 4 suffers from an unquoted service path vulnerability.\n\nSHA-256 | 2515cc0396c9fe28d6463554e021cf6e157431616218c48cd4778c46dd153be4\n\nDownload\n# Exploit Title: IOTransfer V4 - Unquoted Service Path\n# Exploit Author: BLAY ABU SAFIAN (Inveteck Global)\n# Discovery Date: 2022-28-07\n# Vendor Homepage: http://www.iobit.com/en/index.php\n# Software Link: https://iotransfer.itopvpn.com/download/\n# Tested Version: V4\n# Vulnerability Type: Unquoted Service Path\n# Tested on OS: Microsoft Windows Server 2019 Standard Evaluation CVE-2022-37197\n# Step to discover Unquoted Service Path:\n\nC:\\>wmic service get name,displayname,pathname,startmode |findstr /i \"auto\" |findstr /i /v \"c:\\windows\\\\\" |findstr /i /v \"\"\"\n\nIOTransfer Updater IOTUpdaterSvc C:\\Program Files (x86)\\IOTransfer\\Updater\\IOTUpdater.exe\nAuto\n\nC:\\>sc qc IOTUpdaterSvc\n[SC] QueryServiceConfig SUCCESS\n\nSERVICE_NAME: IOTUpdaterSvc\nTYPE : 10 WIN32_OWN_PROCESS\nSTART_TYPE : 2 AUTO_START\nERROR_CONTROL : 1 NORMAL\nBINARY_PATH_NAME : C:\\Program Files (x86)\\IOTransfer\\Updater\\IOTUpdater.exe\nLOAD_ORDER_GROUP :\nTAG : 0\nDISPLAY_NAME : IOTransfer Updater\nDEPENDENCIES :\nSERVICE_START_NAME : LocalSystem\n\nC:\\>systeminfo\n\nOS Name: Microsoft Windows Server 2019 Standard Evaluation\nOS Version: 10.0.17763 N/A Build 17763\nOS Manufacturer: Microsoft Corporation\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-05T05:00:04.705432Z"}, {"uuid": "d3d8d9e1-43fc-4bf5-9caa-d21ddb3f88e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-37197", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/76216", "content": "Exploit Collector\nIOTransfer 4 Unquoted Service Path\n\nhttps://4.bp.blogspot.com/-hp3wB9AXd0k/WWlvDY5V44I/AAAAAAAAIKs/ScSIhWVAvDAhjeMkIwqbNby9r3gKQvOEgCLcBGAs/s1600/h128.png \nIOTransfer version 4 suffers from an unquoted service path vulnerability.\n\nSHA-256 | 2515cc0396c9fe28d6463554e021cf6e157431616218c48cd4778c46dd153be4\n\nDownload\n# Exploit Title: IOTransfer V4 - Unquoted Service Path\n# Exploit Author: BLAY ABU SAFIAN (Inveteck Global)\n# Discovery Date: 2022-28-07\n# Vendor Homepage: http://www.iobit.com/en/index.php\n# Software Link: https://iotransfer.itopvpn.com/download/\n# Tested Version: V4\n# Vulnerability Type: Unquoted Service Path\n# Tested on OS: Microsoft Windows Server 2019 Standard Evaluation CVE-2022-37197\n# Step to discover Unquoted Service Path:\n\nC:\\>wmic service get name,displayname,pathname,startmode |findstr /i \"auto\" |findstr /i /v \"c:\\windows\\\\\" |findstr /i /v \"\"\"\n\nIOTransfer Updater IOTUpdaterSvc C:\\Program Files (x86)\\IOTransfer\\Updater\\IOTUpdater.exe\nAuto\n\nC:\\>sc qc IOTUpdaterSvc\n[SC] QueryServiceConfig SUCCESS\n\nSERVICE_NAME: IOTUpdaterSvc\nTYPE : 10 WIN32_OWN_PROCESS\nSTART_TYPE : 2 AUTO_START\nERROR_CONTROL : 1 NORMAL\nBINARY_PATH_NAME : C:\\Program Files (x86)\\IOTransfer\\Updater\\IOTUpdater.exe\nLOAD_ORDER_GROUP :\nTAG : 0\nDISPLAY_NAME : IOTransfer Updater\nDEPENDENCIES :\nSERVICE_START_NAME : LocalSystem\n\nC:\\>systeminfo\n\nOS Name: Microsoft Windows Server 2019 Standard Evaluation\nOS Version: 10.0.17763 N/A Build 17763\nOS Manufacturer: Microsoft Corporation\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T00:00:57.773344Z"}]}