A local privilege escalation vulnerability exists in Sync Breeze 13.6.18 due to an unquoted service path, posing a significant risk of arbitrary code execution for authenticated local users.

The application utilizes unquoted service paths for its Windows services, specifically the Sync Breeze Server and Sync Breeze Enterprise services. An attacker with local access can place a malicious executable in the path to intercept the service execution, resulting in privilege escalation to LocalSystem.

Successful exploitation of this vulnerability allows a local attacker to achieve full control over the affected system by executing code with LocalSystem privileges. Given the CVSS score of 7.8, this represents a high-severity risk, as it facilitates complete system compromise, potential data exfiltration, or the installation of persistent malicious software once an attacker has established an initial local foothold.

Immediate Action: As no specific patch is identified in the provided data, administrators should manually configure the affected services to use quoted paths or move the installation directory to a location where standard users do not have write permissions.

Proactive Monitoring: Review Windows System event logs for service start errors or unexpected executable launches that deviate from the standard Sync Breeze installation path.

Compensating Controls: Implement strict file system permissions on the 'Program Files' directory to ensure that non-administrative users cannot create files or folders within the Sync Breeze installation path.

Public Exploit Available: Yes, a local exploit proof-of-concept exists, as documented in the Exploit-DB entry 50023.

This vulnerability presents a clear path for local privilege escalation and should be addressed as a priority for all systems running the affected version of Sync Breeze. Administrators must restrict local user permissions on the installation directory or migrate to a secure configuration immediately to prevent potential exploitation of the unquoted service path.