HTC IPTInstaller Unquoted Service Path Vulnerability in PassThru Service

A vulnerability exists in HTC IPTInstaller version 4.0.9, specifically within the PassThru Service, due to an unquoted service path. This flaw allows attackers to exploit the ambiguous binary path to inject and execute malicious code with elevated LocalSystem privileges.

Impact

Exploitation of this vulnerability could lead to unauthorized code execution with elevated privileges, allowing an attacker to execute malicious payloads as the LocalSystem user.

Reproduction

The vulnerability can be reproduced by querying the service configuration for the 'PassThru Service'. The unquoted binary path can be observed, which is susceptible to exploitation. Once the path is identified, it can be manipulated to execute malicious code with elevated privileges.