PT-2024-19581 · Anti Cheat Expert · Ace-Base.Sys

Published 2024-05-01 · Updated 2025-08-08 · CVE-2024-22830

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Anti-Cheat Expert's Windows kernel module "ACE-BASE.sys" version 1.0.2202.6217

Description The issue involves improper access control when handling system resources, allowing a local attacker to escalate privileges from a regular user to System or PPL level.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2024-22830

Affected Products

Ace-Base.Sys

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2024-22830 · Security Note
• https://twitter.com/TheEncyklopedie/status/1789641834643243259 · Twitter Post
• https://reddit.com/r/DeltaForceGlobal/comments/1he8eax/did_they_fix_the_privilege_escalation · Reddit Post
• https://twitter.com/CVEnew/status/1785740743224799350 · Twitter Post
• https://twitter.com/qe201020335/status/1953940221675921545 · Twitter Post
• http://anti-cheat.com · Note
• https://defencetech.it/wp-content/uploads/2024/04/Report-CVE-2024-22830.pdf · Note
• https://twitter.com/VulmonFeeds/status/1785783132102304227 · Twitter Post
• https://twitter.com/NSlythorn/status/1877824182156702017 · Twitter Post
• https://intl.anticheatexpert.com/#/tool-center · Note
• https://twitter.com/SaberNyoki/status/1865015253467075067 · Twitter Post