Acer Backup Manager 3.0.0.99 contains an unquoted service path vulnerability in the NTI IScheduleSvc service that allows local users to potentially execute arbi…

CVE-2021-47826 affects Acer Backup Manager version 3.0.0.99 with an unquoted service path vulnerability in the NTI IScheduleSvc service. The vulnerability allows local users to potentially execute arbitrary code by exploiting the unquoted path in C:\Program Files (x86)\NTI\Acer Backup Manager\. Attackers can inject malicious executables that would run with elevated LocalSystem privileges. This is a local privilege escalation vulnerability that requires local access to exploit. The vulnerability has been publicly disclosed with exploit code available.