Western Digital Kitfox Unquoted Service Path Vulnerability Allowing Arbitrary Code Execution

A vulnerability exists in Western Digital Kitfox for Windows, prior to version 1.1.1.1, due to the application registering a Windows service with an unquoted file path. This flaw allows users with write permissions on the root directory of the system drive to execute arbitrary code with SYSTEM privileges.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution with SYSTEM privileges.

Remediation

Users are advised to update Western Digital Kitfox for Windows to version 1.1.1.1 or later. The latest version can be downloaded from Western Digital's Software download page.