CVE-2021-47825: Acer Updater Service 1.2.3500.0 - 'UpdaterService.exe' Unquoted Service Path
Acer Updater Service 1.2.3500.0 contains an unquoted service path vulnerability that allows local users to execute code with elevated system privileges. Attackers can exploit the unquoted path in C:\Program Files\Acer\Acer Updater\ to inject malicious executables that will run with LocalSystem permissions during service startup.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-47825?
CVE-2021-47825 has a moderate severity level due to its potential to allow local users to execute code with elevated system privileges.
How do I fix CVE-2021-47825?
To remediate CVE-2021-47825, you should update the Acer Updater Service to the latest version that contains the fix for the unquoted service path vulnerability.
Who is affected by CVE-2021-47825?
CVE-2021-47825 affects users of Acer Updater Service version 1.2.3500.0 and prior versions installed on Windows systems.
What type of vulnerability is CVE-2021-47825?
CVE-2021-47825 is an unquoted service path vulnerability that poses risks of privilege escalation for local users.
Can CVE-2021-47825 be exploited remotely?
No, CVE-2021-47825 requires local access to the affected machine for exploitation.