Technical impact
Vembu StoreGrid 4.0 has an unquoted service path in the RemoteBackup and RemoteBackup_webServer services. A local attacker can place a malicious executable where the service path references an unquoted directory and then restart the service. On restart, the executable runs with LocalSystem privileges, allowing the attacker to gain full control of the host. The flaw is classified as CWE-428, an unquoted service path weakness.
Affected Systems
Vembu StoreGrid version 4.0 is affected. The vulnerability exists in the RemoteBackup and RemoteBackup_webServer services, which run under the LocalSystem account and are installed with unquoted paths.
Risk and Exploitability
The CVSS score is 8.5, indicating high severity, and the exploit probability is not publicly available. The vulnerability is not listed in the CISA KEV catalog. Attackers must have local access to the system to place the malicious file and reload the service, so the attack vector is local. Once executed, the attacker can gain full system privileges.
