A local privilege escalation vulnerability in Selea CarPlateServer may allow attackers to execute arbitrary code with elevated system-level permissions.

The application utilizes an unquoted service path for the Selea CarPlateServer Windows service. A local user with low privileges can exploit this by placing a malicious executable in the path, which the service will then execute with LocalSystem privileges upon startup or reboot.

This vulnerability presents a significant security risk, as it allows for full system compromise from a non-privileged local account. With a CVSS score of 8.4, the potential for unauthorized privilege escalation could lead to complete data breach, installation of persistent backdoors, or the disruption of critical traffic control operations managed by the server.

Immediate Action: Review your deployment of Selea CarPlateServer and ensure that service paths are properly quoted or that permissions on the installation directory are restricted to prevent unauthorized binary placement. If the vendor provides an update, apply it immediately.

Proactive Monitoring: Monitor Windows Event Logs for unexpected service startup failures or the creation of new, unrecognized executable files in the root directory or within the application installation path.

Compensating Controls: Ensure strict local access control policies are in place, limiting the ability of standard users to write files to the system drive or application directories.

Public Exploit Available: Yes, a proof-of-concept exploit is available via the Exploit Database (EDB-ID: 49453).

Given the high CVSS score and the public availability of exploit code, organizations utilizing Selea CarPlateServer must prioritize this issue. Administrators should verify the service configuration immediately and apply the necessary path quoting or access restrictions to mitigate the risk of local privilege escalation.