Brother BRAdmin Professional 3.75 contains an unquoted service path vulnerability in the BRA_Scheduler service that allows local users to potentially execute ar…

Brother BRAdmin Professional 3.75 contains an unquoted service path vulnerability in the BRA_Scheduler service. The vulnerability allows local users to potentially execute arbitrary code by placing a malicious executable named 'BRAdmin' in the C:\Program Files (x86)\Brother\ directory. Successful exploitation grants attackers local system privileges on the affected system. This is a local privilege escalation vulnerability that requires existing access to the system but can lead to complete system compromise.