The vulnerability is an unquoted service path in the AdvancedSystemCareService10 service of IObit Advanced SystemCare 10.0.2. Because the service path is not surrounded by quotation marks, an attacker can place a malicious executable in the directory path before the intended executable and the service will launch the attacker’s code when it starts. The code then runs with LocalSystem privileges, giving the attacker full control over the machine.

The affected product is IObit Advanced SystemCare, specifically version 10.0.2, as listed in the official CNA documentation. No other versions are explicitly noted as vulnerable in the provided data.

The CVSS score of 8.5 indicates a high severity, while the EPSS score of less than 1% suggests that the attack is unlikely to be seen widely in the wild. The vulnerability is not in the CISA KEV catalog. The likely attack vector is local; an attacker with local access can place a malicious executable in the service path or edit the registry entry, then restart the service or the system for the malicious code to run as LocalSystem.