CVE-2022-50808
Published: 13 January 2026
Summary
CVE-2022-50808 is a high-severity Uncontrolled Search Path Element (CWE-427) vulnerability in Coolermaster (inferred from references). Its CVSS base score is 8.5 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Path Interception by Unquoted Path (T1574.009); ranked at the 3.1th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 CM-6 (Configuration Settings) and RA-5 (Vulnerability Monitoring and Scanning).
Deeper analysis
CVE-2022-50808 is an unquoted service path vulnerability in the MPService component of CoolerMaster MasterPlus version 1.8.5. This issue, mapped to CWE-427, enables local attackers to execute arbitrary code with elevated system privileges by exploiting the improperly quoted service binary path. The vulnerability carries a CVSS v3.1 base score of 8.4 (AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) and was published on 2026-01-13.
Local attackers with access to the system can exploit this flaw without privileges by dropping a malicious executable into a directory preceding the legitimate service binary in the unquoted path. Upon MPService startup or system reboot, the service loads the attacker's executable instead, resulting in code execution at SYSTEM privilege level and potential full system compromise.
Advisories and references, including a VulnCheck advisory on the CoolerMaster MasterPlus MPService unquoted service path, an Exploit-DB entry (51159) demonstrating the exploit, and the official MasterPlus website, provide further details on the issue. Security practitioners should review these sources for any available patches or mitigation guidance from CoolerMaster.
OWASP Top 10 for Web (2025)
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2026-2650
Vulnerability details
CoolerMaster MasterPlus 1.8.5 contains an unquoted service path vulnerability in the MPService that allows local attackers to execute code with elevated system privileges. Attackers can drop a malicious executable in the service path and trigger code execution during service startup…
more
or system reboot.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Direct match to unquoted service path exploitation enabling local privilege escalation via malicious binary placement in the PATH.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Enforces secure configuration settings for system services, including proper quoting of executable paths to directly prevent exploitation of unquoted service path vulnerabilities like CVE-2022-50808.
Requires timely identification, reporting, and remediation of known flaws such as the unquoted service path in CoolerMaster MPService, eliminating the vulnerability through patching or fixes.
Provides vulnerability scanning that identifies unquoted service path issues like CVE-2022-50808 in installed software components for subsequent remediation.