Local privilege escalation via writable service binary

Local privilege escalation in Dentsply Sirona Sidexis 4.3 and earlier allows local users to execute code with administrative privileges. The SidexisRestService.exe service binary and its parent directories grant Everyone read, write, and change permissions, allowing replacement of the executable. A user with local system access can replace the binary, and the Sidexis service then runs the substituted code under its local administrative service account.