Nitrorsense V3
Approved changes feed: RSS · Atom
cpe:2.3:a:acer:nitrorsense_v3:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Acer (e31959cf-1baa-5b00-aee9-36f2e290d607) |
|---|---|
| Product | Nitrorsense V3 (7f087388-afd7-5cea-a98f-42bb481823d9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-9789 |
vulnerable | 2026-06-08 08:08:59.083426 |
NitroSense V3: Security Vulnerability Information
A Local Privilege Escalation (LPE) vulnerability affects Acer NitroSense software versions prior to 3.01.3052. The vulnerability stems from the the PSAdminAgent service, which creates a Named Pipe with a weak Access Control List (ACL). This allows any authenticated local user to connect and send commands. Because the service does not check the caller's privileges before running file deletion commands, a low-privileged local user can exploit this to delete arbitrary files with system authority.
Published: 2026-05-28T02:39:40.930Z
Updated: 2026-05-28T13:12:02.598Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-9489 |
vulnerable | 2026-06-08 08:08:58.992859 |
NitroSense V3: Local Privilege Escalation (LPE) vulnerability
NitroSense 3.x before 3.01.3052 contains Local Privilege Escalation (LPE) vulnerability.The program exposes a Windows Named Pipe that uses a custom protocol to invoke internal functions. However, this Named Pipe is misconfigured, allowing any authenticated local user to execute arbitrary code with NT AUTHORITY\SYSTEM privileges and to delete arbitrary files with SYSTEM privileges. By leveraging this, an attacker can execute arbitrary code on the target system with elevated privileges.
Published: 2026-05-25T01:50:32.063Z
Updated: 2026-05-26T15:20:21.624Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.