CVE-2022-24285

Name of the Vulnerable Software and Affected Versions Acer Care Center versions 4.00.30xx through 4.00.3041

Description The issue concerns a local privilege escalation. It involves the Acer Care Center's communication with the ACCsvc service through a named pipe, where the pipe has read and write rights for general users. The service program fails to verify the user during communication, allowing a thread to potentially execute a specific command. When the path of a program to be executed is sent, it leads to a local privilege escalation, where the service program executes the path with system privileges.

Recommendations For Acer Care Center versions 4.00.30xx through 4.00.3041, update to version 4.00.3042 or later to resolve the issue.