CVE-2019-25302

Acer Launch Manager 6.1.7600.16385 - 'DsiWMIService' Unquoted Service Path

CVSS 8.5 HIGHEPSS 0.1%CWE-428

Vexday Risk Score

21Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 8.5EPSS 0.1%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

06 fev 2026Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

Acer Launch Manager 6.1.7600.16385 contains an unquoted service path vulnerability in the DsiWMIService that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files (x86)\Launch Manager\dsiwmis.exe to insert malicious code that would execute with system-level permissions during service startup.

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Produtos afetados

Acer · Launch Manager

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://www.acer.com/https://www.exploit-db.com/exploits/47577 https://www.vulncheck.com/advisories/acer-launch-manager-dsiwmiservice-unquoted-service-path