A local unquoted service path vulnerability in devolo dLAN Cockpit 4.3.1 allows attackers to achieve privilege escalation by executing arbitrary code with system-level permissions.

The application utilizes an unquoted service path for the DevoloNetworkService, which fails to properly handle paths containing spaces. A local, non-privileged user can place a malicious executable in the system root path, which the service will then inadvertently run with elevated privileges upon system startup or reboot.

Successful exploitation of this vulnerability allows a local attacker to gain full control over the affected system. Because the malicious code executes with system-level privileges, this flaw poses a significant risk to data confidentiality, integrity, and availability. With a CVSS score of 8.4, the vulnerability is considered high severity, as it facilitates complete system compromise for any user with local access.

Immediate Action: Upgrade to the latest version of devolo dLAN Cockpit as provided by the vendor. If an update is not immediately available, administrators should manually modify the service path configuration to ensure it is properly quoted in the Windows Registry.

Proactive Monitoring: Review system logs for unexpected service restarts or new files created in the system root directory, particularly those with executable extensions.

Compensating Controls: Implement strict file system permissions to prevent non-privileged users from writing files to the root directory or the specific path utilized by the DevoloNetworkService.

Public Exploit Available: No (Exploit available: unknown)

This vulnerability represents a significant privilege escalation risk within the local environment. Security teams must prioritize applying vendor-supplied patches to remediate the insecure service configuration. If patching is delayed, immediate manual intervention to quote the service path in the registry is required to prevent potential local exploitation.