A local privilege escalation vulnerability in Wondershare UBackit 2.0.5 allows unauthorized users to gain elevated system permissions by exploiting an unquoted service path.

The software contains an unquoted service path vulnerability (CWE-428) within the wsbackup service. A local attacker with low privileges can place a malicious executable in the service path, which the system will execute with LocalSystem privileges during the service startup process.

Successful exploitation of this vulnerability allows a local user to escalate their privileges to LocalSystem, effectively granting them full control over the compromised machine. Given the CVSS score of 8.4, this poses a severe risk, as it enables attackers to bypass security controls, install persistent backdoors, and exfiltrate sensitive data. This vulnerability could lead to total system compromise and significant reputational damage if exploited within an enterprise environment.

Immediate Action: Since no official patch is currently identified, users should disable the affected wsbackup service or uninstall Wondershare UBackit 2.0.5 until a secure version is released.

Proactive Monitoring: Monitor system logs for the execution of unauthorized binaries from the installation directory of Wondershare UBackit and review service configuration changes.

Compensating Controls: Implement strict file system permissions on the installation directory to prevent non-privileged users from writing or modifying files within the path of the affected service.

Public Exploit Available: Yes, a proof-of-concept exists as documented in the Exploit-DB entry 50758.

The severity of this vulnerability, combined with the availability of a functional proof-of-concept, necessitates immediate action. Organizations should audit their environments for the presence of Wondershare UBackit 2.0.5 and prioritize the removal or containment of the affected service to prevent unauthorized privilege escalation.