{"vulnerability": "cve-2022-23909", "sightings": [{"uuid": "fafc0341-fd25-4367-9fe6-296b169eb428", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23909", "type": "seen", "source": "https://t.me/cibsecurity/40147", "content": "\u203c CVE-2022-23909 \u203c\n\nThere is an unquoted service path in Sherpa Connector Service (SherpaConnectorService.exe) 2020.2.20328.2050. This might allow a local user to escalate privileges by creating a \"C:\\Program Files\\Sherpa Software\\Sherpa.exe\" file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-04-05T12:28:33.000000Z"}, {"uuid": "8272b5ba-faf8-4b5d-9b42-b0cda81476ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23909", "type": "published-proof-of-concept", "source": "Telegram/yM58Rllmnw8Zh1MoGQKY68xhWZV27nEQmKlJQr2Z8Id1-24", "content": "", "creation_timestamp": "2026-08-28T00:00:31.392835Z"}, {"uuid": "9fbbfd32-4a8d-40d5-9c38-fe32f4f50d4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23909", "type": "published-proof-of-concept", "source": "Telegram/yM58Rllmnw8Zh1MoGQKY68xhWZV27nEQmKlJQr2Z8Id1-24", "content": "", "creation_timestamp": "2026-08-27T20:00:11.955998Z"}, {"uuid": "78f53745-71bf-43ae-8576-acff3d850be4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23909", "type": "seen", "source": "https://t.me/hacking_Attack/48701", "content": "Exploit Collector\nSherpa Connector Service 2020.2.20328.2050 Unquoted Service Path\n\nhttps://4.bp.blogspot.com/-I-n26yI3Cmk/WWlvWxoCyUI/AAAAAAAAIOM/Fl6K91g5v_sGMssa7qzCkbxeapM4aUyUACLcBGAs/s1600/h50.png \nSherpa Connector Service version 2020.2.20328.2050 suffers from an unquoted service path vulnerability.\n\nMD5 | 8d245fded6c0423ea8f5d318d08ed987\n\nDownload\n# Exploit Title:  Sherpa Connector Service (v2020.2.20328.2050) - Unquoted Service Path\n# Exploit Author: Manthan Chhabra (netsectuna), Harshit (fumenoid)\n# Version: 2020.2.20328.2050\n# Date: 02/04/2022\n# Vendor Homepage: http://gimmal.com/\n# Vulnerability Type: Unquoted Service Path\n# Tested on: Windows 10\n# CVE: CVE-2022-23909\n# Step to discover Unquoted Service Path:\nC:\\>wmic service get name,displayname,pathname,startmode | findstr /i \"sherpa\" | findstr /i \"auto\" |findstr /i /v \"c:\\windows\\\\\" |findstr /i /v \"\"\"\n\nSherpa Connector Service                                                            Sherpa Connector Service                                C:\\Program Files\\Sherpa Software\\Sherpa Connector\\SherpaConnectorService.exe                                            Auto\nC:\\>sc qc \"Sherpa Connector Service\"\n\n[SC] QueryServiceConfig SUCCESS\n\nSERVICE_NAME: Sherpa Connector Service\nTYPE               : 10  WIN32_OWN_PROCESS\nSTART_TYPE         : 2   AUTO_START\nERROR_CONTROL      : 1   NORMAL\nBINARY_PATH_NAME   : C:\\Program Files\\Sherpa Software\\Sherpa Connector\\SherpaConnectorService.exe\nLOAD_ORDER_GROUP   :\nTAG                : 0\nDISPLAY_NAME       : Sherpa Connector Service\nDEPENDENCIES       : wmiApSrv\nSERVICE_START_NAME : LocalSystem\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:48.089773Z"}, {"uuid": "fc2ba66a-fab3-4a2f-a327-31d15f7069ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23909", "type": "seen", "source": "https://t.me/hacking_Attack/48701", "content": "Exploit Collector\nSherpa Connector Service 2020.2.20328.2050 Unquoted Service Path\n\nhttps://4.bp.blogspot.com/-I-n26yI3Cmk/WWlvWxoCyUI/AAAAAAAAIOM/Fl6K91g5v_sGMssa7qzCkbxeapM4aUyUACLcBGAs/s1600/h50.png \nSherpa Connector Service version 2020.2.20328.2050 suffers from an unquoted service path vulnerability.\n\nMD5 | 8d245fded6c0423ea8f5d318d08ed987\n\nDownload\n# Exploit Title:  Sherpa Connector Service (v2020.2.20328.2050) - Unquoted Service Path\n# Exploit Author: Manthan Chhabra (netsectuna), Harshit (fumenoid)\n# Version: 2020.2.20328.2050\n# Date: 02/04/2022\n# Vendor Homepage: http://gimmal.com/\n# Vulnerability Type: Unquoted Service Path\n# Tested on: Windows 10\n# CVE: CVE-2022-23909\n# Step to discover Unquoted Service Path:\nC:\\>wmic service get name,displayname,pathname,startmode | findstr /i \"sherpa\" | findstr /i \"auto\" |findstr /i /v \"c:\\windows\\\\\" |findstr /i /v \"\"\"\n\nSherpa Connector Service                                                            Sherpa Connector Service                                C:\\Program Files\\Sherpa Software\\Sherpa Connector\\SherpaConnectorService.exe                                            Auto\nC:\\>sc qc \"Sherpa Connector Service\"\n\n[SC] QueryServiceConfig SUCCESS\n\nSERVICE_NAME: Sherpa Connector Service\nTYPE               : 10  WIN32_OWN_PROCESS\nSTART_TYPE         : 2   AUTO_START\nERROR_CONTROL      : 1   NORMAL\nBINARY_PATH_NAME   : C:\\Program Files\\Sherpa Software\\Sherpa Connector\\SherpaConnectorService.exe\nLOAD_ORDER_GROUP   :\nTAG                : 0\nDISPLAY_NAME       : Sherpa Connector Service\nDEPENDENCIES       : wmiApSrv\nSERVICE_START_NAME : LocalSystem\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:01.257694Z"}, {"uuid": "99b6e658-da04-4836-b466-c97e601575aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23909", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/48701", "content": "Exploit Collector\nSherpa Connector Service 2020.2.20328.2050 Unquoted Service Path\n\nhttps://4.bp.blogspot.com/-I-n26yI3Cmk/WWlvWxoCyUI/AAAAAAAAIOM/Fl6K91g5v_sGMssa7qzCkbxeapM4aUyUACLcBGAs/s1600/h50.png \nSherpa Connector Service version 2020.2.20328.2050 suffers from an unquoted service path vulnerability.\n\nMD5 | 8d245fded6c0423ea8f5d318d08ed987\n\nDownload\n# Exploit Title:  Sherpa Connector Service (v2020.2.20328.2050) - Unquoted Service Path\n# Exploit Author: Manthan Chhabra (netsectuna), Harshit (fumenoid)\n# Version: 2020.2.20328.2050\n# Date: 02/04/2022\n# Vendor Homepage: http://gimmal.com/\n# Vulnerability Type: Unquoted Service Path\n# Tested on: Windows 10\n# CVE: CVE-2022-23909\n# Step to discover Unquoted Service Path:\nC:\\>wmic service get name,displayname,pathname,startmode | findstr /i \"sherpa\" | findstr /i \"auto\" |findstr /i /v \"c:\\windows\\\\\" |findstr /i /v \"\"\"\n\nSherpa Connector Service                                                            Sherpa Connector Service                                C:\\Program Files\\Sherpa Software\\Sherpa Connector\\SherpaConnectorService.exe                                            Auto\nC:\\>sc qc \"Sherpa Connector Service\"\n\n[SC] QueryServiceConfig SUCCESS\n\nSERVICE_NAME: Sherpa Connector Service\nTYPE               : 10  WIN32_OWN_PROCESS\nSTART_TYPE         : 2   AUTO_START\nERROR_CONTROL      : 1   NORMAL\nBINARY_PATH_NAME   : C:\\Program Files\\Sherpa Software\\Sherpa Connector\\SherpaConnectorService.exe\nLOAD_ORDER_GROUP   :\nTAG                : 0\nDISPLAY_NAME       : Sherpa Connector Service\nDEPENDENCIES       : wmiApSrv\nSERVICE_START_NAME : LocalSystem\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T03:00:05.185504Z"}, {"uuid": "07770dd1-9281-4480-a87a-e0bbafa35f8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23909", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/48701", "content": "Exploit Collector\nSherpa Connector Service 2020.2.20328.2050 Unquoted Service Path\n\nhttps://4.bp.blogspot.com/-I-n26yI3Cmk/WWlvWxoCyUI/AAAAAAAAIOM/Fl6K91g5v_sGMssa7qzCkbxeapM4aUyUACLcBGAs/s1600/h50.png \nSherpa Connector Service version 2020.2.20328.2050 suffers from an unquoted service path vulnerability.\n\nMD5 | 8d245fded6c0423ea8f5d318d08ed987\n\nDownload\n# Exploit Title:  Sherpa Connector Service (v2020.2.20328.2050) - Unquoted Service Path\n# Exploit Author: Manthan Chhabra (netsectuna), Harshit (fumenoid)\n# Version: 2020.2.20328.2050\n# Date: 02/04/2022\n# Vendor Homepage: http://gimmal.com/\n# Vulnerability Type: Unquoted Service Path\n# Tested on: Windows 10\n# CVE: CVE-2022-23909\n# Step to discover Unquoted Service Path:\nC:\\>wmic service get name,displayname,pathname,startmode | findstr /i \"sherpa\" | findstr /i \"auto\" |findstr /i /v \"c:\\windows\\\\\" |findstr /i /v \"\"\"\n\nSherpa Connector Service                                                            Sherpa Connector Service                                C:\\Program Files\\Sherpa Software\\Sherpa Connector\\SherpaConnectorService.exe                                            Auto\nC:\\>sc qc \"Sherpa Connector Service\"\n\n[SC] QueryServiceConfig SUCCESS\n\nSERVICE_NAME: Sherpa Connector Service\nTYPE               : 10  WIN32_OWN_PROCESS\nSTART_TYPE         : 2   AUTO_START\nERROR_CONTROL      : 1   NORMAL\nBINARY_PATH_NAME   : C:\\Program Files\\Sherpa Software\\Sherpa Connector\\SherpaConnectorService.exe\nLOAD_ORDER_GROUP   :\nTAG                : 0\nDISPLAY_NAME       : Sherpa Connector Service\nDEPENDENCIES       : wmiApSrv\nSERVICE_START_NAME : LocalSystem\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T01:00:37.020609Z"}]}