Don't get hijacked by ACE (or RCE)

Arbitrary code execution (ACE) is a form of cyber attack which allows the attacker to execute code in software or on hardware. Remote code execution (RCE) is an exploit that allows the code to be executed on a network.


ACE can operate by using a flaw in a web browser to act with the same privileges as the user. ACE exploits can turn off security protections or hijack a computer to launch attacks on other computers. An example of an ACE attack is shown here on the site of the Cybersecurity & Infrastructure Security Agency in a report about GE's CIMPLICITY automation software for manufacturing systems.




The vulnerability allows the attacker to extend his or her privileges in the system.