CVE-2023-22282

CVE-2023-22282 describes an unquoted service path vulnerability in WAB-MAT Ver.5.0.0.8 and earlier, affecting both Elecom and Microsoft Windows environments. This flaw allows an attacker to execute arbitrary code with elevated privileges if a malicious executable is placed in a specific path, due to the Windows service attempting to run it instead of the legitimate program. Rated with a CVSS score of 7.3 (High), the vulnerability requires local access and user interaction (UI:R) but can lead to high impact on confidentiality, integrity, and availability (C:H/I:H/A:H). Currently, there is no evidence of active exploitation, no public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage.