Acer NitroSense Local Privilege Escalation Vulnerability

A local privilege escalation vulnerability exists in Acer NitroSense software versions prior to 3.01.3052. The issue arises from the PSAdminAgent service, which creates a Named Pipe with a weak Access Control List (ACL). This configuration allows any authenticated local user to connect and send commands. The vulnerability is exploited because the service fails to verify the caller's privileges before executing file deletion commands, enabling a low-privileged local user to delete arbitrary files with system authority.

Impact

Exploitation of this vulnerability allows low-privileged local users to delete arbitrary files with system privileges.

Remediation

Users can update to Acer NitroSense version 3.01.3052 or later to address this vulnerability.