Connectify Hotspot Unquoted Service Path Vulnerability in ConnectifyService Executable

A vulnerability exists in Connectify Hotspot 2018 due to an unquoted service path in the ConnectifyService executable. This flaw allows local attackers to execute arbitrary code by exploiting the unquoted path in 'C:\Program Files (x86)\Connectify\ConnectifyService.exe'. Attackers could inject malicious executables to escalate privileges.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution with elevated privileges.

Reproduction

The vulnerability can be reproduced by injecting a malicious executable into the unquoted service path of the ConnectifyService. Once the executable is injected, it can be executed to achieve arbitrary code execution with escalated privileges.