Seagate Toolkit Unquoted Search Path Vulnerability on Windows

A vulnerability allowing unquoted search path exploitation has been identified in Seagate Toolkit versions prior to 2.34.0.33 for Windows. This issue arises from the service executable path, which can be manipulated by an attacker with admin privileges. If the attacker has write permissions to the root directory, they could place a malicious 'Program.exe' file that would execute with SYSTEM privileges.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of malicious programs with SYSTEM privileges, allowing for significant control over the affected system.