Sync Breeze Unquoted Service Path Vulnerability Allowing Arbitrary Code Execution

A vulnerability exists in Sync Breeze version 13.6.18 due to an unquoted service path in its Windows service configuration. This flaw allows local attackers to execute arbitrary code by exploiting the unquoted path in service binaries located in 'Program Files' directories. Attackers can inject malicious executables to escalate privileges.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of arbitrary code with elevated privileges.

Reproduction

The vulnerability can be reproduced by installing Sync Breeze version 13.6.18 and then using the Windows Management Instrumentation Command-line (WMIC) to query the service configuration. The unquoted service path can be identified, which indicates the presence of this vulnerability. Once the unquoted path is confirmed, malicious executables can be injected to exploit the vulnerability.