PT-2026-3279 · Acer · Acer Epowersvc

Emmanuel Lujan · Published 2026-01-16 · Updated 2026-01-16 · CVE-2021-47823

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Acer ePowerSvc version 6.0.3008.0

Description The software contains an unquoted service path issue. This allows local users to potentially execute code with elevated system privileges. An attacker can exploit the unquoted path in the service configuration to inject malicious code. This code would then execute with LocalSystem permissions during service startup.

Recommendations Apply appropriate quoting to the service path to prevent unauthorized code execution.

Exploit

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2021-47823

Affected Products

Acer Epowersvc

References · 5

• 🔥 https://exploit-db.com/exploits/49900 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-47823 · Security Note
• https://acer.com · Note
• https://twitter.com/CVEnew/status/2012303220610306335 · Twitter Post
• https://vulncheck.com/advisories/epowersvc-epowersvcexe-unquoted-service-path · Note