Technical impact
Iperius Remote 1.7.0 contains an unquoted service path vulnerability that allows a local user to install the software in a directory containing spaces. When the service starts or the system reboots, the Windows Service Manager expands the unquoted path, causing it to search for executables in each component of the path. An attacker can place a malicious executable with a name that matches one of the path components, which will then be launched with SYSTEM privileges, giving the attacker full control over the affected machine.
Affected Systems
The vulnerability applies to Iperius Remote version 1.7.0. No other versions are listed in the CNA data, so all installations of version 1.7.0 are implicated.
Risk and Exploitability
The CVSS score of 8.5 indicates a high severity, and the exploit requires local attacker privileges and the ability to write files to the service installation directory. Although an EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, the vulnerability is still highly dangerous because it can be executed during normal service startup or system reboots once the malicious file is in place. The attack vector is local with an attacker-controlled system, making this a critical privilege-escalation flaw for any system running the vulnerable service.
