Emmanuel Lujan

CVE-2021-47826 EXPLOITDB HIGH text WRITEUP

Acer Backup Manager 3.0.0.99 - Code Injection

Acer Backup Manager 3.0.0.99 contains an unquoted service path vulnerability in the NTI IScheduleSvc service that allows local users to potentially execute arbitrary code. Attackers can exploit the unquoted path in C:\Program Files (x86)\NTI\Acer Backup Manager\ to inject malicious executables that would run with elevated LocalSystem privileges.

CVSS 7.8

View Code

CVE-2021-47825 EXPLOITDB HIGH text WRITEUP

Acer Updater Service 1.2.3500.0 - Privilege Escalation

Acer Updater Service 1.2.3500.0 contains an unquoted service path vulnerability that allows local users to execute code with elevated system privileges. Attackers can exploit the unquoted path in C:\Program Files\Acer\Acer Updater\ to inject malicious executables that will run with LocalSystem permissions during service startup.

CVSS 7.8

View Code

CVE-2021-47823 EXPLOITDB HIGH text WRITEUP

Acer ePowerSvc 6.0.3008.0 - Privilege Escalation

Acer ePowerSvc 6.0.3008.0 contains an unquoted service path vulnerability that allows local users to potentially execute code with elevated system privileges. Attackers can exploit the unquoted path in the service configuration to inject malicious code that would execute with LocalSystem permissions during service startup.

CVSS 7.8

View Code

CVE-2020-36976 EXPLOITDB HIGH text WRITEUP

Acer Global Registration Service 1.0.0.3 - Code Injection

Acer Global Registration Service 1.0.0.3 contains an unquoted service path vulnerability in its service configuration that allows local users to potentially execute arbitrary code. Attackers can exploit the unquoted path in C:\Program Files (x86)\Acer\Registration\ to inject malicious executables that would run with elevated LocalSystem privileges during service startup.

CVSS 7.8

View Code