A local privilege escalation vulnerability in Weird Solutions DHCP Broadband 4.1.0.1503 could allow an attacker to gain full system control.

The application utilizes an unquoted service path for the dhcpt.exe binary, which allows a local attacker to place a malicious executable in the path and achieve code execution with LocalSystem privileges upon service startup.

Successful exploitation of this vulnerability allows a low privileged local user to escalate their permissions to the highest level, resulting in total system compromise. Given the CVSS score of 7.8, this represents a high risk to the confidentiality, integrity, and availability of the affected host, potentially leading to unauthorized data access or complete system takeover.

Immediate Action: Update to the latest version of DHCP Broadband as provided by Weird Solutions to ensure the service path is correctly quoted and secured.

Proactive Monitoring: Monitor Windows service configuration changes and review system logs for unauthorized file creation within the C:\Program Files directory.

Compensating Controls: Ensure strict file system permissions are applied to the C:\Program Files\DHCP Broadband 4 directory to prevent non-privileged users from writing or modifying files within that folder.

Public Exploit Available: Yes, a published proof-of-concept exists as documented in the Exploit-DB entry 49850.

This vulnerability presents a significant risk due to the potential for full system compromise via local privilege escalation. Administrators should prioritize patching the affected service immediately. If an update is not currently feasible, restricting write access to the application installation directory is a mandatory interim measure to prevent exploitation.