CVE-2019-25302
Published: 06 February 2026
Summary
CVE-2019-25302 is a high-severity Unquoted Search Path or Element (CWE-428) vulnerability in Acer Launch Manager (inferred from references). Its CVSS base score is 8.5 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Path Interception by Unquoted Path (T1574.009); ranked at the 2.7th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 CM-6 (Configuration Settings) and CM-7 (Least Functionality).
Deeper analysis
CVE-2019-25302 is an unquoted service path vulnerability affecting Acer Launch Manager version 6.1.7600.16385, specifically in the DsiWMIService. The issue stems from an unquoted path to the executable at C:\Program Files (x86)\Launch Manager\dsiwmis.exe, which enables local privilege escalation. It has a CVSS v3.1 base score of 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) and is associated with CWE-428 (Unquoted Search Path or Element).
Local users with low privileges can exploit this vulnerability by placing a malicious executable in a directory that precedes the legitimate path in the system's search order, such as C:\Program Files. When the DsiWMIService starts, it executes the attacker's code with system-level permissions, potentially granting full control over the affected system, including high confidentiality, integrity, and availability impacts.
Advisories and resources, including those from VulnCheck and Acer, detail the issue, while an exploit is publicly available on Exploit-DB (exploit ID 47577). Published on 2026-02-06, no specific patch details are outlined in the provided information, but practitioners should check vendor sites for updates to Acer Launch Manager and consider service path hardening as a mitigation.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2019-19402
Vulnerability details
Acer Launch Manager 6.1.7600.16385 contains an unquoted service path vulnerability in the DsiWMIService that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files (x86)\Launch Manager\dsiwmis.exe to insert malicious code that…
more
would execute with system-level permissions during service startup.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Unquoted service path in Windows service directly enables path interception by unquoted path (T1574.009) for local privilege escalation (T1068).
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Establishes and enforces secure configuration settings for system services, directly mitigating unquoted service path vulnerabilities by requiring properly quoted executable paths like that of DsiWMIService.
Requires timely identification, reporting, and correction of flaws such as the unquoted path in Acer Launch Manager's DsiWMIService, preventing local privilege escalation exploits.
Enforces least functionality by prohibiting or restricting unnecessary services like DsiWMIService, eliminating the attack surface for unquoted path exploitation.