Local attackers can escalate privileges on systems running OKI sPSV Port Manager due to an unquoted service path vulnerability.

The software is vulnerable to an Unquoted Search Path (CWE-428) issue, where the service path is not enclosed in quotes. This allows an authenticated local user to manipulate the service execution environment and elevate their privileges.

With a CVSS score of 7.8, this vulnerability allows a local attacker to bypass standard security restrictions and execute arbitrary commands with SYSTEM-level privileges. This poses a significant threat to the integrity of the host and the security of data managed within the environment.

Immediate Action: Check with Oki for official updates. In the absence of a vendor patch, manually adjust the service path registry entries to ensure they are properly quoted.

Proactive Monitoring: Monitor for suspicious file modifications in directories where services reside. Use log analysis to detect unauthorized attempts to modify service configurations.

Compensating Controls: Restrict write access to the service directories and ensure that standard users do not have administrative rights. Deploy security tools that monitor for process-level anomalies.

Public Exploit Available: Yes — an entry exists on ExploitDB.

Organizations must treat this vulnerability with high priority, especially on multi-user systems or workstations. Ensure that the software is updated if a patch is released, or apply the necessary registry modifications to mitigate the risk of local privilege escalation.