Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.5

Flame II HSPA USB Modem allows attackers to run malicious code with admin rights

CVE-2022-50935 · published 9 months ago
Summary

The Flame II HSPA USB Modem's Windows service has a configuration mistake that lets attackers run their own code with administrator privileges on the device. This could allow hackers to do serious damage. To fix this, update the modem's software or replace it if necessary.

Original advisory text
Flame II HSPA USB Modem contains an unquoted service path vulnerability in its Windows service configuration. Attackers can exploit the unquoted path in 'C:\Program Files (x86)\Internet Telcel\Appl...
Flame II HSPA USB Modem contains an unquoted service path vulnerability in its Windows service configuration. Attackers can exploit the unquoted path in 'C:\Program Files (x86)\Internet Telcel\ApplicationController.exe' to execute arbitrary code with elevated system privileges.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
8.5 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-428Unquoted Search Path or Element
Timeline
Published13 Jan 2026
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2022-50935 · NVD
Track software like this
Free during beta