NETGATE Data Backup Unquoted Service Path Vulnerability in NGDatBckpSrv

A vulnerability exists in NETGATE Data Backup version 3.0.620 due to an unquoted service path in the NGDatBckpSrv Windows service. This flaw allows attackers to exploit the unquoted path to inject and execute malicious code with LocalSystem privileges by placing executable files in specific directory locations.

Impact

Exploitation of this vulnerability could lead to unauthorized code execution with LocalSystem privileges.

Reproduction

The vulnerability can be reproduced by querying the service configuration for 'NGDatBckpSrv'. The unquoted service path can be exploited by placing an executable in a directory that the service will access, which will then be executed with elevated privileges.