Alps Pointing-Device Controller Unquoted Service Path Vulnerability in ApHidMonitorService

A local privilege escalation vulnerability has been identified in the Alps Pointing-device Controller version 8.1202.1711.04. The issue resides in the ApHidMonitorService, which has an unquoted service path. This vulnerability allows local attackers to execute code with elevated privileges. By placing a malicious executable in the service path, attackers can gain system-level access when the service is restarted or the system is rebooted.

Impact

Exploitation of this vulnerability allows for local privilege escalation, enabling attackers to execute code with elevated privileges on the system.

Reproduction

The vulnerability can be reproduced by placing a malicious executable in the unquoted service path of the ApHidMonitorService. After placing the executable, restarting the service or rebooting the system will execute the malicious code with elevated privileges.