Windows Firewall Control 4.8.6.0 contains an unquoted service path flaw that permits a local attacker to install a malicious executable in the directory referenced by the wfcs.exe service. Upon restarting the service or rebooting, the executable runs with LocalSystem privileges, effectively giving the attacker full control of the affected machine. The weakness is a classic unquoted service path problem (CWE‑428) that elevates local privileges to system level.

The vulnerability affects Binisoft's Windows Firewall Control product, version 4.8.6.0. No additional affected versions are listed.

The CVSS score of 8.5 indicates a high risk level for this local privilege escalation vulnerability, but the EPSS score is not available, so the current exploit probability cannot be quantified. It is not catalogued in CISA’s KEV list, suggesting no known widespread exploitation at this time. Attackers would need local access to the target machine to place a malicious executable in the unquoted service path and then trigger a service restart or system boot to achieve escalation.