CVE-2021-35312: A vulnerability was found in CIR 2000 / Gestionale Amica Prodigy v1.7.

Security readout for executives and security teams

CVE-2021-35312 is a local privilege escalation issue in CIR 2000 / Gestionale Amica Prodigy v1.7. A user who already has access to the machine may be able to replace the backup service executable and have it run with LocalSystem privileges. This is not described as a remote internet-facing compromise. Exposure is likely limited to Windows systems running CIR 2000 / Gestionale Amica Prodigy v1.7 with the RemoteBackup.Service.exe component installed. The attacker prerequisite is local unprivileged access, so risk is highest on shared workstations, terminal servers, or compromised endpoints. Treat this as a targeted endpoint hardening issue, not a broad perimeter emergency. Prioritize systems where untrusted or many users have local access, because successful abuse could give full system control on those machines. Mitigation focus: Check CIR 2000 or product vendor guidance for any supported update or hardening advice.; Restrict write access to the RemoteBackup.Service.exe path to trusted administrators only.; Remove or disable the backup service if it is not required for business operations..

Prepared

Jun 2, 2026, 19:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.