MegaTec UPSilon 2000 Unquoted Service Path Vulnerability in RupsMon and USBMate Services Allowing Privilege Escalation

A vulnerability exists in the RupsMon and USBMate services of MegaTec UPSilon 2000, which run with SYSTEM privileges and feature unquoted service paths. This configuration enables local attackers to intercept paths and escalate privileges, provided they have write permissions in the directories leading to the actual service executables.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation by allowing a local attacker to gain elevated rights on the system.