High severity · published Jan 26, 2022
CVE-2021-45975
In ListCheck.exe in Acer Care Center 4.x before 4.00.3038, a vulnerability in the loading mechanism of Windows DLLs could allow a local attacker to perform a DLL hijacking attack
7.8
CVSS
0.6%
EPSS
No
On KEV
Description
In ListCheck.exe in Acer Care Center 4.x before 4.00.3038, a vulnerability in the loading mechanism of Windows DLLs could allow a local attacker to perform a DLL hijacking attack. This vulnerability is due to incorrect handling of directory search paths at run time. An attacker could exploit this vulnerability by placing a malicious DLL file on the targeted system. This file will execute when the vulnerable application launches. A successful exploit could allow the attacker to execute arbitrary code on the targeted system with local administrator privileges.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 49% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CC
Care Center · Acer
4.0 before 4.00.3038 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-45975
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-45975
Broken Link
https://acercsi.com
Exploit
https://aptw.tf/2022/01/20/acer-care-center-privesc.html
Vendor Advisory
https://community.acer.com/en/kb/articles/14757-acer-care-center-requires-an-update-to-resolve-a-security-vulnerability
More from Care Center
7.8
CVE-2022-24285
Acer Care Center 4.00.30xx before 4.00.3042 contains a local privilege escalation vulnerability
5.5
CVE-2026-9490
Acer Care Center creates a Named Pipe with a weak Security Descriptor
