CVE-2024-22830
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
The Windows kernel module 'ACE-BASE.sys' version 1.0.2202.6217 of Anti-Cheat Expert does not perform proper access control when handling system resources. This allows a local attacker to escalate privileges from regular user to System or PPL level.
Risk Assessment
The organization is at risk of a local attacker gaining full system control, potentially leading to data theft, malware installation, or permanent system damage.
Recommendation
Immediately update the 'ACE-BASE.sys' driver to the latest version provided by the vendor and restrict local access to systems where it is used.
Original NVD description (English source)
Anti-Cheat Expert's Windows kernel module "ACE-BASE.sys" version 1.0.2202.6217 does not perform proper access control when handling system resources. This allows a local attacker to escalate privileges from regular user to System or PPL level.