Vulnerability in Acer Quick Access
CVE-2019-18670
In the Quick Access Service (QAAdminAgent.exe) in Acer Quick Access V2.01.3000 through 2.01.3027 and V3.00.3000 through V3.00.3008, a REGULAR user can load an arbitrary unsigned DLL into the signed service's process, which is running as NT AUTHORITY\SYSTEM. This is a DLL Hijacking vulnerability (including search order hijacking, which searches for the missing DLL in the PATH environment variable), which is caused by an uncontrolled search path element for nvapi.dll, atiadlxx.dll, or atiadlxy.dll.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.008 (55.7th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 56th percentile — 55.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.008 · newest: 0.008 · change: 0.000
Affected products
Weakness classification (CWE)
Public proof-of-concept exploits
References
- drive.google.com/open (Exploit, Third Party Advisory)
- us.answers.acer.com/app/answers/detail/a_id/64586 (Patch, Vendor Advisory)
Frequently asked questions
- What is CVE-2019-18670?
- CVE-2019-18670 is a high-severity vulnerability in Acer Quick Access, classified under Uncontrolled Search Path Element. CVSS score: 7.8/10. Published 2019-12-17.
- How severe is CVE-2019-18670?
- High severity. CVSS v3 base score is 7.8 out of 10.
- Is CVE-2019-18670 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.