Amiti Antivirus Unquoted Service Path Vulnerability Allowing Code Execution

A vulnerability exists in Amiti Antivirus version 25.0.640 due to an unquoted service path in its Windows service configurations. This flaw allows attackers to inject and execute malicious code with elevated LocalSystem privileges by placing executable files in specific directory locations.

Impact

Exploitation of this vulnerability could lead to unauthorized code execution with LocalSystem privileges.

Reproduction

The vulnerability can be reproduced by querying the service configuration for 'AmitiAvHealth' and 'AmitiAvSrv' using the 'sc qc' command. This will reveal the unquoted service paths. Once the unquoted path is identified, an executable can be placed in a directory that exploits this misconfiguration, allowing for code execution with elevated privileges.