Tolga Cohce

**Name of the Vulnerable Software and Affected Versions** Acer Agent Service (affected versions not specified) **Description** The Acer Agent Service component, included with NitroSense and PredatorSense, uses a hard-coded AES encryption key. This allows a local attacker to potentially access protected information or perform unauthorized actions by utilizing the embedded key. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** NitroSense (affected versions not specified) PredatorSense (affected versions not specified) **Description** The Acer Agent Service component fails to properly require authentication during the socket handshake process. This flaw allows an unauthorized connection to be established, which may grant access to restricted functionality. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Acer System Monitoring (affected versions not specified) **Description** The Acer System Monitoring component, included with NitroSense and PredatorSense, contains a hard-coded AES encryption key. AES (Advanced Encryption Standard) is a symmetric block cipher used to secure data. A local attacker could potentially leverage this embedded key to access protected information or execute unauthorized actions. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** NitroSense (affected versions not specified) PredatorSense (affected versions not specified) **Description** The Acer System Monitoring component, used in NitroSense and PredatorSense, contains a flaw where a WebSocket service is configured to listen on all network interfaces. This configuration may allow the service to be accessed by unauthorized users over the network. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.