The WOW21 service is vulnerable to local privilege escalation due to an unquoted service path, which could allow a local attacker to execute malicious code with LocalSystem permissions.

This vulnerability involves an unquoted service path (CWE-428) in the WOW21_Service. Because the binary path is not enclosed in quotes, a local attacker with standard privileges can place a malicious executable in the directory hierarchy to intercept the service startup and achieve code execution with LocalSystem privileges.

Successful exploitation of this vulnerability allows a local attacker to gain full administrative control over the affected host, leading to a complete compromise of system integrity and confidentiality. Given the CVSS score of 8.4, this flaw poses a significant risk to organizational assets by enabling lateral movement or the deployment of persistent malware, potentially resulting in severe operational disruption.

Immediate Action: Update the WOW21 software to a patched version if available, or manually secure the service by modifying the registry to enclose the binary path in quotes.

Proactive Monitoring: Monitor system logs for unauthorized service installations or modifications to binary paths in the Windows Registry.

Compensating Controls: Restrict local user permissions to prevent unauthorized file writes to system directories, particularly under the Program Files folder where the service resides.

Public Exploit Available: Yes, a proof of concept is published on ExploitDB (EDB-ID 50818).

This vulnerability presents a high risk of privilege escalation that could lead to full system compromise. IT administrators should prioritize securing the service path or applying vendor-supplied updates immediately to eliminate this attack vector.