CVE-2022-37197

This is a writeup demonstrating an unquoted service path vulnerability in IOTransfer V4. The exploit details how the service path lacks quotes, potentially allowing local privilege escalation if an attacker can place a malicious executable in the path.