A local privilege escalation vulnerability in the OKI Configuration Tool, version 1.6.53, allows attackers to execute arbitrary code by exploiting an unquoted service path.

The application utilizes an unquoted service path for the OKI Local Port Manager service, which lacks proper encapsulation in the binary execution path. A local, low-privileged attacker can place a malicious executable in a directory that precedes the intended binary, causing the service to execute the attacker-controlled file with system-level permissions.

The vulnerability carries a CVSS score of 7.8, reflecting its potential for full system compromise. If exploited, an attacker can gain administrative or system-level control over the host machine, leading to unauthorized data access, the installation of persistent malware, and potential lateral movement within the corporate network.

Immediate Action: Administrators should update the OKI Configuration Tool to the latest available version or, if no patch is provided by the vendor, disable the vulnerable "OKI Local Port Manager" service if it is not strictly required for business operations.

Proactive Monitoring: Security teams should monitor for the creation of unauthorized executable files within the "C:\Program Files\Okidata" directory structure and audit service configurations for unquoted paths using tools like WMIC or PowerShell.

Compensating Controls: Implement strict file system permissions on the application installation directory to prevent non-administrative users from writing or modifying files within the "Okidata" folder path.

Public Exploit Available: Yes, a proof-of-concept exploit is available via the Exploit Database (EDB-ID 49624).

Given the severity of potential privilege escalation and the existence of a public proof-of-concept, this vulnerability poses a significant risk to affected workstations. IT administrators should prioritize identifying installations of OKI Configuration Tool 1.6.53 and apply the vendor-recommended updates or disable the vulnerable service immediately to mitigate the risk of local system compromise.