PT-2026-3279 · Acer · Acer Epowersvc

Emmanuel Lujan · Publicado 2026-01-16 · Atualizado 2026-01-16 · CVE-2021-47823

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Acer ePowerSvc version 6.0.3008.0

Description The software contains an unquoted service path issue. This allows local users to potentially execute code with elevated system privileges. An attacker can exploit the unquoted path in the service configuration to inject malicious code. This code would then execute with LocalSystem permissions during service startup.

Recommendations Apply appropriate quoting to the service path to prevent unauthorized code execution.

Exploit

Correção

Enumeração de Fraquezas

CWE-428

Identificadores relacionados

CVE-2021-47823

Produtos afetados

Acer Epowersvc

Referências · 5

• 🔥 https://exploit-db.com/exploits/49900 · Exploit
• https://acer.com · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2021-47823 · Nota de Segurança
• https://twitter.com/CVEnew/status/2012303220610306335 · Publicação no Twitter
• https://vulncheck.com/advisories/epowersvc-epowersvcexe-unquoted-service-path · Nota