Weird Solutions DHCP Turbo Unquoted Service Path Vulnerability Allowing Arbitrary Code Execution

A vulnerability exists in Weird Solutions DHCP Turbo version 4.61298 due to an unquoted service path. This flaw allows local attackers to execute arbitrary code by exploiting the service binary path. Attackers can place malicious executables in the service path, potentially gaining elevated privileges when the service is started.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of code with elevated privileges.

Reproduction

The vulnerability can be reproduced by placing a malicious executable in the unquoted service path of the DHCP Turbo 4.61298 application. Once the executable is in place, starting the service will execute the malicious payload with elevated privileges.