Disk Savvy Enterprise Unquoted Service Path Vulnerability Allowing Arbitrary Code Execution

A vulnerability exists in Disk Savvy Enterprise version 12.3.18 due to an unquoted service path in the service configuration. This flaw allows local attackers to execute arbitrary code by injecting malicious executables into the unquoted path of the service executable. The vulnerability could lead to privilege escalation.

Impact

Exploitation of this vulnerability could result in unauthorized code execution with elevated privileges.

Reproduction

The vulnerability can be reproduced by exploiting the unquoted service path of the Disk Savvy Enterprise application. After installation, the service can be queried using the Windows Management Instrumentation Command-line (WMIC) tool to reveal the unquoted path. This path can then be exploited to execute arbitrary code.