VPN Unlimited Unquoted Service Path Vulnerability Allowing Local Privilege Escalation

A vulnerability in VPN Unlimited version 6.1 for Windows creates an unquoted service path issue. This flaw allows local attackers to inject malicious executables into the service binary path. Exploitation of this vulnerability could lead to unauthorized replacement of the service executable, granting elevated system privileges to the attacker.

Impact

Exploitation of this vulnerability could result in local privilege escalation, allowing an attacker to gain elevated system rights.

Reproduction

The vulnerability can be reproduced by replacing the service executable with a malicious one, taking advantage of the unquoted service path. After the malicious executable is placed in the service binary path, the VPN Unlimited service can be restarted, which will execute the injected payload with elevated privileges.