Lenovo LegionSpace version 1.7.11.2 contains an unquoted service path vulnerability in the 'DAService' component (service path: C:\Program Files\Lenovo\LegionSpace\1.7.11.2\LSDaemon.exe). This allows local attackers to execute arbitrary code with elevated privileges by inserting malicious code into the system root path.
| Vendor | Product | Versions |
|---|---|---|
| lenovo | legionspace | 1.7.11.2 |
