Services File Permissions Weakness

Adversaries may exploit write permissions on a Windows service executable or its containing directory to replace the file and have it run when the service starts. The replacement runs in the service's configured security context, which can be more privileged than the modifying account. This technique concerns file-system permissions; changing the service's registry configuration is a separate technique.