Acer PredatorSense Local Privilege Escalation Vulnerability

A local privilege escalation vulnerability has been identified in Acer PredatorSense versions 3.00.3136 through 3.00.3196. The issue arises because the program exposes a Windows Named Pipe that, while intended to invoke internal functions via a custom protocol, is misconfigured. This flaw allows any authenticated local user to execute arbitrary code with NT AUTHORITY\SYSTEM privileges and to delete arbitrary files with SYSTEM privileges. Exploiting this vulnerability enables an attacker to execute code on the target system with elevated rights.

Impact

Exploitation of this vulnerability allows for local privilege escalation, enabling authenticated users to execute arbitrary code with SYSTEM privileges and delete files with the same elevated rights.