CVE-2021-45975: acer care_center Untrusted Search Path
Vulnerability summary
CVE-2021-45975 is a high (CVSS 7.8) Untrusted Search Path vulnerability in acer care_center. EPSS estimates a 0.60% chance of exploitation in the next 30 days, higher than 48.1% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 26-01-2022PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
In ListCheck.exe in Acer Care Center 4.x before 4.00.3038, a vulnerability in the loading mechanism of Windows DLLs could allow a local attacker to perform a DLL hijacking attack. This vulnerability is due to incorrect handling of directory search paths at run time. An attacker could exploit this vulnerability by placing a malicious DLL file on the targeted system. This file will execute when the vulnerable application launches. A successful exploit could allow the attacker to execute arbitrary code on the targeted system with local administrator privileges.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.60%
Chance of exploitation in the next 30 days
Percentile
48%
Versus all other CVEs
30-day change
0.00 pp
From 0.60% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (aptw.tf)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Acer1 product
- care_center≥ 4.0, < 4.00.3038
1 vendor · 1 product