CVE-2019-25302
HIGHAcer Launch Manager 6.1.7600.16385 - Privilege Escalation
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2019-25302. PoCs published by Gustavo Briseño.
AI-analyzed exploit summary This is a technical writeup describing an unquoted service path vulnerability in Acer Launch Manager's DsiWMIService. The vulnerability allows local privilege escalation if an attacker can place executable code in a directory within the unquoted path.
Description
Acer Launch Manager 6.1.7600.16385 contains an unquoted service path vulnerability in the DsiWMIService that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files (x86)\Launch Manager\dsiwmis.exe to insert malicious code that would execute with system-level permissions during service startup.
Exploits (1)
This is a technical writeup describing an unquoted service path vulnerability in Acer Launch Manager's DsiWMIService. The vulnerability allows local privilege escalation if an attacker can place executable code in a directory within the unquoted path.
References (3)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H