Adaware Web Companion 4.9.2159 contains an unquoted service path vulnerability in the WCAssistantService that allows local attackers to potentially execute arbi…

CVE-2020-37102 affects Adaware Web Companion version 4.9.2159, containing an unquoted service path vulnerability in the WCAssistantService component. This vulnerability allows local attackers to exploit the unquoted binary path by injecting malicious executables. When the service starts up, these malicious executables are executed with LocalSystem privileges, potentially allowing arbitrary code execution. The vulnerability enables privilege escalation attacks through path manipulation during service initialization.