Back to Database
Status published
High
CVE-2022-50928
Bluetooth Application 5.4.277 - 'BlueSoleilCS' Unquoted Service Path
Vulnerability Description
BlueSoleilCS 5.4.277 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted binary path in 'C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe' to inject malicious executables and escalate privileges.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-50928
Credits & Attribution
No credits recorded in the NVD database.
Affected Vendor
IVT Corp
View all reports →Affected Software
Bluetooth Application BlueSoleilCS
Vulnerable Versions:
5.4.277
Timeline
Official Publish:
January 13th, 2026
Last Modified:
February 2nd, 2026
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H