Huawei MBAMainService Unquoted Service Path

`# Exploit Title: Huawei "MBAMainService" Unquoted Service Path  
# Date: 2020-12-14  
# Exploit Author: Andrea Bocchetti  
# Vendor Homepage:  
https://consumer.huawei.com/en/support/laptops/matebook-d/  
# Software Link: https://consumer.huawei.com/en/support/laptops/matebook-d/  
# Category:Local  
# Tested on: Microsoft Windows 10 Pro ( 10.0.19041.488)  
  
# Step to discover the unquoted Service:  
C:\Users\user>wmic service get name, displayname, pathname, startmode |  
findstr /i "Auto" |findstr /i /v "C:\Windows\\" |findstr /i /v """  
  
C:\Users\Andrea>sc qc "MBAMainService"  
[SC] QueryServiceConfig OPERAZIONI RIUSCITE  
  
  
[image: 56565.JPG]  
`