# Exploit Title: Huawei "MBAMainService" Unquoted Service Path
# Date: 2020-12-14
# Exploit Author: Andrea Bocchetti
# Vendor Homepage:
https://consumer.huawei.com/en/support/laptops/matebook-d/
# Software Link: https://consumer.huawei.com/en/support/laptops/matebook-d/
# Category:Local
# Tested on:  Microsoft Windows 10 Pro ( 10.0.19041.488)

# Step to discover the unquoted Service:
C:\Users\user>wmic service get name, displayname, pathname, startmode |
findstr /i "Auto" |findstr /i /v "C:\Windows\\" |findstr /i /v """

C:\Users\Andrea>sc qc "MBAMainService"
[SC] QueryServiceConfig OPERAZIONI RIUSCITE


[image: 56565.JPG]