Cooler Master MasterPlus Unquoted Service Path Vulnerability in MPService Allowing Elevated Privileges

A vulnerability exists in Cooler Master MasterPlus version 1.8.5, specifically within the MPService, due to an unquoted service path. This flaw enables local attackers to execute code with elevated system privileges. By placing a malicious executable in the service path, attackers can initiate code execution when the service starts or during a system reboot.

Impact

Exploitation of this vulnerability could lead to unauthorized code execution with system privileges.

Reproduction

The vulnerability can be reproduced by dropping a malicious executable into the unquoted service path of 'C:\Program Files (x86)\CoolerMaster\MasterPlus\'. After placing the executable, either restart the 'MPService' or reboot the system to trigger the execution of the malicious payload.