CVE-2021-47823: ePowerSvc 6.0.3008.0 - 'ePowerSvc.exe' Unquoted Service Path
Acer ePowerSvc 6.0.3008.0 contains an unquoted service path vulnerability that allows local users to potentially execute code with elevated system privileges. Attackers can exploit the unquoted path in the service configuration to inject malicious code that would execute with LocalSystem permissions during service startup.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-47823?
CVE-2021-47823 has a medium severity rating due to the potential for local users to execute code with elevated system privileges.
How do I fix CVE-2021-47823?
To fix CVE-2021-47823, ensure that the service path for ePowerSvc is properly quoted to avoid the vulnerability.
Who is affected by CVE-2021-47823?
CVE-2021-47823 affects users of Acer ePowerSvc version 6.0.3008.0 and earlier.
What is an unquoted service path in the context of CVE-2021-47823?
An unquoted service path is a configuration error that can allow attackers to exploit the service to execute malicious code with higher privileges.
Can CVE-2021-47823 be exploited remotely?
No, CVE-2021-47823 can only be exploited locally by users with access to the system.