Local privilege escalation via unquoted service path

Unquoted service paths in W&T COM Redirectors and OPC-Server allow local users to execute code with administrative privileges. Their Windows service ImagePath registry values omit quotation marks, so path parsing can select an attacker-placed executable from a space-delimited prefix before the intended binary. Exploitation requires local low-privilege access and write access to a suitable directory along the service path; successful execution grants administrative control.