A local privilege escalation vulnerability exists in OKI Print Job Accounting 4.4.10 due to an unquoted service path, posing a significant risk of arbitrary code execution.

The software utilizes an unquoted service path for the OkiJaSvc service. A local attacker with low privileges can exploit this by placing a malicious executable in the directory path to hijack the service execution and gain elevated system privileges.

Successful exploitation allows a local, authenticated attacker to execute arbitrary code with SYSTEM-level privileges. This effectively compromises the confidentiality, integrity, and availability of the host machine. Given the CVSS score of 7.8, this flaw represents a high-severity risk to internal security, as it facilitates lateral movement and full system takeover once an initial foothold is established.

Immediate Action: Administrators should immediately update to the latest available version of the software provided by OKI or apply the specific configuration hardening recommended by the vendor to quote the service path.

Proactive Monitoring: Review Windows Service configurations using tools like PowerShell (Get-WmiObject Win32_Service) to identify and remediate any instances of unquoted service paths within the environment.

Compensating Controls: Implement strict file system permissions on the C:\Program Files\Okidata\ directory to prevent unauthorized users from creating files or subdirectories that could be leveraged for service path hijacking.

Public Exploit Available: Yes, a public exploit exists as documented in the Exploit Database (EDB-ID: 49623).

This vulnerability presents a clear path for privilege escalation on Windows systems running the affected OKI software. Security teams must prioritize identifying all instances of Print Job Accounting 4.4.10 and ensuring they are updated or that the service paths are manually quoted to mitigate the risk of unauthorized code execution.