PT-2026-3282 · Acer · Acer Backup Manager

Emmanuel Lujan · Publicado 2026-01-16 · Atualizado 2026-01-17 · CVE-2021-47826

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Acer Backup Manager version 3.0.0.99

Description Acer Backup Manager version 3.0.0.99 has an issue with an unquoted service path in the NTI IScheduleSvc service. This could allow local users to execute arbitrary code. The unquoted path is located in C:Program Files (x86)NTIAcer Backup Manager. Exploiting this issue may allow attackers to inject malicious executables that run with elevated LocalSystem privileges.

Recommendations Apply a fix to quote the service path for the NTI IScheduleSvc service.

Exploit

Correção

Enumeração de Fraquezas

CWE-428

Identificadores relacionados

CVE-2021-47826

Produtos afetados

Acer Backup Manager

Referências · 6

• 🔥 https://exploit-db.com/exploits/49889 · Exploit
• https://acer.com/ac/en/US/content/home · Nota
• https://twitter.com/CVEnew/status/2012303217603002582 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2021-47826 · Nota de Segurança
• https://twitter.com/RedPacketSec/status/2012332016545456252 · Publicação no Twitter
• https://vulncheck.com/advisories/acer-backup-manager-module-ischedulesvcexe-unquoted-service-path · Nota