A local privilege escalation vulnerability in the SecurOS Enterprise SecurosCtrlService allows authenticated users to execute code with system-level permissions.

The application utilizes an unquoted service path for the SecurosCtrlService, which fails to encapsulate the executable path in quotes. An authenticated local user can place a malicious executable in the system path, which the service will then execute with elevated SYSTEM privileges upon startup.

A successful exploit allows an attacker to transition from a restricted local user account to full system administrator control. This compromise can lead to complete server takeover, unauthorized access to sensitive video surveillance data, and the potential for lateral movement within the corporate network. Given the CVSS score of 7.8, this represents a high-risk security flaw that necessitates immediate attention to prevent unauthorized system administration.

Immediate Action: Update the SecurOS Enterprise installation to the latest version provided by the vendor which addresses the unquoted service path configuration.

Proactive Monitoring: Review Windows System Event logs for unexpected service startup failures or the creation of unauthorized executables within the C:\Program Files (x86)\ISS\ directory structure.

Compensating Controls: If patching is delayed, administrators should manually apply quotes to the service path via the Windows Registry (HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SecurosCtrlService) to ensure the system correctly interprets the path.

Public Exploit Available: Yes, a technical write-up and proof-of-concept are available via Exploit-DB (EDB-ID: 47556).

The reliance on unquoted service paths is a well-understood vulnerability pattern that poses a significant risk to system integrity. Security teams should prioritize remediating this configuration issue on all instances of SecurOS Enterprise to prevent potential privilege escalation. Applying the vendor-supplied update or manually correcting the service path via the registry is essential to mitigating this threat.