The value should be of type REG_EXPAND_SZ or REG_SZ with quotes.

Low. No sophisticated exploit code is needed—just file placement. Identifying the Vulnerability