A local privilege escalation vulnerability in the WiseBootAssistant service of Wise Care 365 allows attackers to execute arbitrary code with LocalSystem privileges.

The application suffers from an unquoted service path vulnerability (CWE-428) in the WiseBootAssistant service. Because the service path is not properly enclosed in quotes, a local user with sufficient permissions can place a malicious executable in the path, which the system will then execute with elevated LocalSystem privileges upon service restart.

Successful exploitation grants an attacker full control over the affected system by elevating privileges from a standard user to LocalSystem. Given the CVSS score of 7.8, this represents a high-severity risk to system integrity and confidentiality, as it facilitates complete system compromise, potential data exfiltration, and the installation of persistent backdoors.

Immediate Action: Update to the latest version of Wise Care 365 provided by Wisecleaner, which addresses the improper handling of the service path.

Proactive Monitoring: Monitor system logs for unauthorized service modifications or the creation of unexpected executables within the C:\Program Files (x86)\Wise directory structure.

Compensating Controls: Restrict write access to the C:\Program Files (x86)\ directory to prevent unprivileged users from placing malicious binaries in the vulnerable path.

Public Exploit Available: Yes, a proof-of-concept exploit is available via ExploitDB (EDB-ID: 50038).

This vulnerability presents a significant risk to local system security by enabling trivial privilege escalation. Administrators should prioritize updating the software immediately to eliminate the unquoted service path. If an update cannot be applied, ensure that standard user permissions are strictly enforced to prevent unauthorized file placement within the application installation directory.