A local privilege escalation vulnerability in 10-Strike Bandwidth Monitor 3.9 allows an attacker to gain SYSTEM-level access to the host machine.

The application services Svc10StrikeBandMonitor, Svc10StrikeBMWD, and Svc10StrikeBMAgent contain unquoted service paths. This flaw allows a local, authenticated attacker to place a malicious executable in a parent directory, which the service will execute with SYSTEM privileges upon startup.

Successful exploitation grants an attacker full control over the affected host, leading to complete system compromise. Because the service runs with SYSTEM privileges, this vulnerability enables an attacker to bypass standard user restrictions, install persistent backdoors, or exfiltrate sensitive data. With a CVSS score of 7.8, this represents a high-severity risk that demands immediate attention for any environment where local user accounts are present.

Immediate Action: As no official vendor patch is currently available, administrators must manually quote the affected service paths in the Windows Registry to prevent the OS from misinterpreting the path.

Proactive Monitoring: Monitor the filesystem for unexpected executable files created in the root directory or parent directories of the 10-Strike installation path (e.g., C:\Program.exe).

Compensating Controls: Restrict write permissions on the installation directories to prevent low-privileged users from placing malicious binaries in the path.

Public Exploit Available: Yes, a proof of concept and technical details are available via Exploit-DB (EDB-ID 48591).

Given the availability of public exploit code and the high impact of privilege escalation to SYSTEM, this vulnerability poses a significant risk to internal security. IT administrators should prioritize the manual configuration of service paths and ensure that non-administrative users have restricted access to the application directories until an official update is released.