Wondershare MobileTrans Unquoted Service Path Vulnerability in ElevationService

A vulnerability exists in Wondershare MobileTrans version 3.5.9, specifically within the ElevationService, due to an unquoted service path. This flaw allows local users to execute code with elevated system privileges. The vulnerability can be exploited by placing malicious executables in certain filesystem locations, which will be executed with LocalSystem permissions when the service starts.

Impact

Exploitation of this vulnerability could lead to unauthorized code execution with elevated privileges, allowing a local user to execute malicious payloads as the LocalSystem user.

Reproduction

The vulnerability can be reproduced by placing a malicious executable in a location that will be accessed by the unquoted service path of the ElevationService. The executable will then be executed with LocalSystem privileges when the service starts.