IP Watcher Unquoted Service Path Vulnerability Allowing Arbitrary Code Execution

A vulnerability exists in IP Watcher version 3.0.0.30 due to an unquoted service path in the Windows service configuration. This flaw allows local attackers to execute arbitrary code by injecting malicious executables into the unquoted binary path. The injected executables are executed with elevated LocalSystem privileges when the service starts.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution with LocalSystem privileges.

Reproduction

The vulnerability can be reproduced by exploiting the unquoted service path of the IPWatcherSvc Windows service. After injecting a malicious executable into the unquoted path, the executable will be executed with elevated privileges when the service is started.