ASUSTOR ABP and AES Unquoted ImagePath Vulnerability in Windows Service Configuration Allowing Privilege Escalation

A vulnerability exists in the Windows service configuration of ASUSTOR Backup Plan (ABP) versions through 2.0.7.6130 and ASUSTOR EZSync (AES) versions through 1.0.6.6133. The vulnerability stems from an unquoted ImagePath registry value, which allows local attackers to execute arbitrary code by placing a malicious executable in a predictable location, such as 'C:\Program.exe'. If the service is running with elevated privileges, this exploitation could lead to privilege escalation to SYSTEM level.

Impact

Exploitation of this vulnerability allows for arbitrary code execution, with potential privilege escalation to SYSTEM level, if the service is running with elevated privileges.

Remediation

Users can upgrade to ASUSTOR Backup Plan version 2.0.7.6131 or above, or ASUSTOR EZSync version 1.0.6.6134 or above.