1094 matches found
Privilege escalation
Acer QuickAccess 2.01.300x before 2.01.3030 and 3.00.30xx before 3.00.3038 contains a local privilege escalation vulnerability. The user process communicates with a service of system authority through a named pipe. In this case, the Named Pipe is also given Read and Write rights to the general...
Privilege escalation
Acer Care Center 4.00.30xx before 4.00.3042 contains a local privilege escalation vulnerability. The user process communicates with a service of system authority called ACCsvc through a named pipe. In this case, the Named Pipe is also given Read and Write rights to the general user. In addition,...
CVE-2021-40376
otris Update Manager 1.2.1.0 allows local users to achieve SYSTEM access via unauthenticated calls to exposed interfaces over a .NET named pipe. A remote attack may be possible as well, by leveraging WsHTTPBinding for HTTP traffic on TCP port 9000...
Code injection
otris Update Manager 1.2.1.0 allows local users to achieve SYSTEM access via unauthenticated calls to exposed interfaces over a .NET named pipe. A remote attack may be possible as well, by leveraging WsHTTPBinding for HTTP traffic on TCP port 9000...
Acer Care Center 授权问题漏洞
Acer Care Center is a system care center from Acer China Acer that allows you to back up or restore your system settings and network drivers to prevent the effects of system failure. Acer Care Center version 4.00.30xx to versions prior to 4.00.3042 A security vulnerability exists that originates...
Acer QuickAccess 授权问题漏洞
Acer QuickAccess is used by Acer China Acer to adjust common settings on computers. A security vulnerability exists in Acer QuickAccess versions 2.01.300x through 2.01.3030 and 3.00.30xx through 3.00.3038, which originates when a user process communicates with a service with system privileges via...
CVE-2022-24285
Acer Care Center 4.00.30xx before 4.00.3042 contains a local privilege escalation vulnerability. The user process communicates with a service of system authority called ACCsvc through a named pipe. In this case, the Named Pipe is also given Read and Write rights to the general user. In addition,...
CVE-2022-24285
CVE-2022-24285 affects Acer Care Center 4.00.30xx prior to 4.00.3042. The issue arises when a user process communicates with the ACCsvc System Privileges service via a named pipe that is granted Read/Write rights to general users, and the service does not authenticate the user. A thread may trigg...
CVE-2022-24286
Acer QuickAccess 2.01.300x before 2.01.3030 and 3.00.30xx before 3.00.3038 contains a local privilege escalation vulnerability. The user process communicates with a service of system authority through a named pipe. In this case, the Named Pipe is also given Read and Write rights to the general...
PT-2022-16583
Name of the Vulnerable Software and Affected Versions Acer Care Center versions 4.00.30xx through 4.00.3041 Description The issue concerns a local privilege escalation. It involves the Acer Care Center's communication with the ACCsvc service through a named pipe, where the pipe has read and write...
PT-2022-16584
Name of the Vulnerable Software and Affected Versions Acer QuickAccess versions 2.01.300x through 2.01.3029 Acer QuickAccess versions 3.00.30xx through 3.00.3037 Description The issue concerns a local privilege escalation. It involves a user process communicating with a system authority service...
CVE-2022-24285: Improper Authentication
Acer Care Center 4.00.30xx before 4.00.3042 contains a local privilege escalation vulnerability. The user process communicates with a service of system authority called ACCsvc through a named pipe. In this case, the Named Pipe is also given Read and Write rights to the general user. In addition,...
CVE-2022-24286: Improper Authentication
Acer QuickAccess 2.01.300x before 2.01.3030 and 3.00.30xx before 3.00.3038 contains a local privilege escalation vulnerability. The user process communicates with a service of system authority through a named pipe. In this case, the Named Pipe is also given Read and Write rights to the general...
CVE-2021-40376
CVE-2021-40376 affects otris Update Manager 1.2.1.0. The vulnerability allows local users to obtain SYSTEM privileges by sending unauthenticated calls to exposed interfaces via a .NET named pipe. A remote attack may be possible by abusing WsHTTPBinding for HTTP traffic on TCP port 9000. CVSS data...
CVE-2021-40376
otris Update Manager 1.2.1.0 allows local users to achieve SYSTEM access via unauthenticated calls to exposed interfaces over a .NET named pipe. A remote attack may be possible as well, by leveraging WsHTTPBinding for HTTP traffic on TCP port 9000...
CVE-2021-40376: Improper Authentication
otris Update Manager 1.2.1.0 allows local users to achieve SYSTEM access via unauthenticated calls to exposed interfaces over a .NET named pipe. A remote attack may be possible as well, by leveraging WsHTTPBinding for HTTP traffic on TCP port 9000...
PT-2022-11224
Name of the Vulnerable Software and Affected Versions otris Update Manager version 1.2.1.0 Description The issue allows local users to gain SYSTEM access through unauthenticated calls to exposed interfaces over a .NET named pipe. It is also possible that a remote attack could be conducted by...
The vulnerability of the Named Pipe File System component of the Windows operating system, which allows a hacker to exploit their privileges
The vulnerability of the Named Pipe File System component in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...
