A vulnerability in the ITeC ITeCProteccioAppServer service allows local attackers to achieve privilege escalation through an unquoted service path.

This flaw stems from an unquoted service path (CWE-428), which allows a local attacker to insert a malicious executable into the service directory. Upon service restart or system reboot, the system executes the malicious file with LocalSystem privileges.

Successful exploitation allows a local user to gain complete control over the affected host, leading to unauthorized data access, system disruption, or persistence. Given the CVSS score of 8.4, this vulnerability represents a high-severity risk that could be used to compromise the integrity and confidentiality of the entire operating system environment.

Immediate Action: Contact the vendor, ITeC, to obtain the latest security updates and apply them to all instances of the ITeCProteccioAppServer.

Proactive Monitoring: Review system logs for unauthorized service modifications or the creation of suspicious executables within the C:\Program Files (x86)\ITeC\ directory.

Compensating Controls: Administrators can mitigate this risk by ensuring that standard users do not have write permissions to the directories involved in the service path, or by manually modifying the registry to quote the service path.

Public Exploit Available: Yes, a proof-of-concept exists as documented in the Exploit Database (EDB-ID: 50902).

The presence of a public proof-of-concept for this vulnerability elevates the risk for local exploitation. IT administrators should prioritize auditing their installations of ITeCProteccioAppServer and apply any available vendor patches or manual configuration changes to quote the service path, as this will effectively eliminate the privilege escalation vector.