AnyDesk Unquoted Service Path Vulnerability Allowing Local Privilege Escalation

A vulnerability exists in AnyDesk version 5.4.0 due to an unquoted service path in its Windows service configuration. This flaw allows local attackers to inject malicious executables. Exploitation of the unquoted binary path could enable the placement of harmful files in service executable locations, potentially leading to elevated system privileges.

Impact

Exploitation of this vulnerability could allow local attackers to gain elevated system privileges by injecting malicious executables into service executable locations.

Reproduction

The vulnerability can be reproduced by exploiting the unquoted service path of the AnyDesk application. This can be done by placing a malicious executable in a location that the AnyDesk service will execute it from, taking advantage of the fact that the service path is not properly quoted.