TexasSoft CyberPlanet Unquoted Service Path Vulnerability in CCSrvProxy Allowing Arbitrary Code Execution

A vulnerability exists in TexasSoft CyberPlanet version 6.4.131 within the CCSrvProxy service, due to an unquoted service path. This flaw enables local attackers to execute arbitrary code by exploiting the unquoted path in 'C:\Program Files (x86)\TenaxSoft\CyberPlanet\SrvProxy.exe'. Attackers can inject malicious executables that, when executed, could lead to elevated system privileges.

Impact

Exploitation of this vulnerability allows for arbitrary code execution with elevated privileges on the affected system.

Reproduction

The vulnerability can be reproduced by injecting a malicious executable into the unquoted service path of the CCSrvProxy service. This can be done by exploiting the unquoted path vulnerability, which allows the injected executable to be executed with elevated privileges.