An unquoted service path vulnerability in Terratec DMX_6Fire USB v.1.23.0.02 allows a local malicious user to escalate privileges via the Program.exe component.