Shrew Soft VPN Client Unquoted Service Path Vulnerability Allowing Arbitrary Code Execution

A vulnerability exists in Shrew Soft VPN Client version 2.2.2 due to an unquoted service path. This flaw enables local users to execute arbitrary code with elevated system privileges. By placing malicious executables in the unquoted service path, attackers can gain elevated access when the service starts or during a system reboot.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of code with elevated privileges, allowing local users to gain higher access rights on the system.

Reproduction

The vulnerability can be reproduced by placing a malicious executable in the system root path, undetected by the operating system or security applications. The executable would then be executed with elevated privileges when the Shrew Soft VPN Client service starts or during a system reboot.