EaseUS Data Recovery Unquoted Service Path Vulnerability Allowing Code Execution

A vulnerability exists in EaseUS Data Recovery version 15.1.0.0, specifically within the EaseUS UPDATE SERVICE executable. This vulnerability is characterized by an unquoted service path, which can be exploited by attackers to inject and execute malicious code with elevated LocalSystem privileges.

Impact

Exploitation of this vulnerability allows for arbitrary code execution with LocalSystem privileges.

Reproduction

The vulnerability can be reproduced by creating a service with an unquoted path that includes spaces. This can be done using the Windows Service Control (sc) command. Once the service is created, it can be exploited to execute malicious payloads with elevated privileges.