PT-2026-2406 · Emerson · Emerson Pac Machine Edition

Luis Martinez · CVE-2022-50930 · Published 2026-01-13 · Updated 2026-01-14

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Emerson PAC Machine Edition version 9.80

Description Emerson PAC Machine Edition 9.80 has an issue with an unquoted service path in the TrapiServer service. This could allow local users to potentially run code with higher privileges. An attacker can take advantage of the unquoted path in the service setup to inject malicious code that runs with LocalSystem permissions when the service starts.

Recommendations Ensure the service path for TrapiServer is properly quoted.

Exploit

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2022-50930

Affected Products

Emerson Pac Machine Edition

References · 6

• 🔥 https://exploit-db.com/exploits/50745 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-50930 · Security Note
• https://emerson.com/en-us · Note
• https://opertek.com/descargar-software/?prc=_326 · Note
• https://vulncheck.com/advisories/emerson-pac-machine-edition-build-trapiserver-unquoted-service-path · Note
• https://twitter.com/CVEnew/status/2011383056121180483 · Twitter Post