This vulnerability arises from insecure file permissions on the WService.exe executable in the installation directory of Splinterware System Scheduler Pro 5.12. A low‑privilege user can rename or replace this file with a malicious version; when the service later restarts it runs with LocalSystem privileges, effectively giving the attacker administrative access. The flaw is a classic example of improper privilege rights (CWE‑276).

The vulnerability is specific to Splinterware System Scheduler Pro version 5.12. Users of this software, deployed on Windows environments where the WService.exe file resides in the installation folder, are impacted.

The CVSS base score of 8.6 indicates a high severity, and the EPSS is not available, but the potential for local privilege escalation is significant. Because no current exploit is publicly listed in KEV, there is no known mass exploitation. However, the attack vector is local and straightforward for any user with write permission to the installation directory, making it highly exploitable if the permission policy is misconfigured.