CVE-2022-50935CWE-428

FLAME II MODEM USB - Unquoted Service Path

High · published January 13, 2026

CVSS v4.0
8.5
EPSS
0%
Percentile
35.5
In the wild
Unconfirmed
What it is

⚡ An unquoted service path in the Flame II HSPA USB Modem is like leaving the front door wide open and hoping nobody notices! Think of this as a restaurant where the kitchen staff forget to label the food items. Without clear signs, any sneaky ingredient could end up in your dish—here, the unquoted path allows attackers to slide in their own malicious code without anyone checking first. If exploited, this vulnerability could allow attackers to execute arbitrary code with elevated system privileges, essentially giving them the keys to your entire system! Imagine the chaos as they could read sensitive data, install malware, or even take complete control. That's an absolutely devastating scenario for any user!

Put simply

Think of this as a restaurant where the kitchen staff forget to label the food items. Without clear signs, any sneaky ingredient could end up in your dish—here, the unquoted path allows attackers to slide in their own malicious code without anyone checking first. This vulnerability arises from the service configuration of the Flame II HSPA USB Modem, where the executable path is not quoted. This oversight allows an attacker to exploit the service to run arbitrary code, potentially gaining system-level access.

What to do

If exploited, this vulnerability could allow attackers to execute arbitrary code with elevated system privileges, essentially giving them the keys to your entire system! Imagine the chaos as they could read sensitive data, install malware, or even take complete control. That's an absolutely devastating scenario for any user! To protect yourself, ensure that the service path is properly quoted in the configuration. Additionally, update the modem's firmware to the latest version as soon as it's available, and regularly monitor for any security advisories related to this device. You've got this! Follow these steps and secure your system against this sneaky vulnerability! 🛡️

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00423 · 35.5th percentile
Weakness
CWE-428 · Unquoted Search Path or Element
Published
2026-01-13T22:52Z
EPSS history
Timeline
  • 13 JAN 22:52Z
    FLAME II MODEM USB - Unquoted Service Path
    cvelistv5