Verify Windows Privilege Escalation: Unquoted Service Path
Verify Windows Privilege Escalation: Unquoted Service Path
A service whose service executable path contains spaces and is not wrapped within quotes can lead to a vulnerability known as Unquoted Service Path. This vulnerability allows a normal user to gain administrative access to the machine by performing privilege escalation using the local system account which is needed to launch the service executable.
Check for vulnerability:
wmic service get name,displayname,pathname,startmode |findstr /i “auto” |findstr /i /v “c:\windows\\” |findstr /i /v “””