Kingosoft Technology Kingo ROOT Unquoted Service Path Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in Kingosoft Technology Ltd Kingo ROOT version 1.5.8.3353. The issue arises from an unquoted service path, which allows attackers to place a malicious executable in a parent directory, leading to unauthorized privilege escalation.

Impact

Exploitation of this vulnerability allows for unauthorized privilege escalation on the affected system.

Reproduction

The vulnerability can be reproduced by placing a crafted executable file into a parent folder of the unquoted service path. Once the executable is in place, the service can be started, leading to privilege escalation.