SysGauge Server Unquoted Service Path Vulnerability Allowing Privilege Escalation

A vulnerability exists in SysGauge Server version 7.9.18 due to an unquoted service path in the binary path configuration. This flaw allows local attackers to execute arbitrary code by exploiting the unquoted path in 'C:\Program Files\SysGauge Server\bin\sysgaus.exe'. Attackers can inject malicious executables to escalate privileges.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of arbitrary code with elevated privileges.

Reproduction

The vulnerability can be reproduced by querying the service configuration for 'SysGauge Server' using the 'sc qc' command. This will reveal the unquoted binary path, which can be exploited to inject malicious executables.