Atera

atera

3 CVEs • 2 products

Products (2)

Click to collapse

Toggle

Agent Package Availability

agent_package_availability

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-37243 1Atera 1Agent Package Availability Nov 21, 2024 Oct 31, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 The C:\Windows\Temp\Agent.Package.Availability\Agent.Package.Availability.exe file is automatically launched as SYSTEM when the system reboots. Since the C:\Windows\Temp\Agent.Package.Availability folder inherits permiss...Show more The C:\Windows\Temp\Agent.Package.Availability\Agent.Package.Availability.exe file is automatically launched as SYSTEM when the system reboots. Since the C:\Windows\Temp\Agent.Package.Availability folder inherits permissions from C:\Windows\Temp and Agent.Package.Availability.exe is susceptible to DLL hijacking, standard users can write a malicious DLL to it and elevate their privileges. Show less
CVE-2023-26077 1Atera 1Atera Nov 21, 2024 Jul 24, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Atera Agent through 1.8.3.6 on Windows Creates a Temporary File in a Directory with Insecure Permissions.
CVE-2023-26078 1Atera 1Atera Nov 21, 2024 Jul 24, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Privilege escalation vulnerability was discovered in Atera Agent 1.8.4.4 and prior on Windows due to mishandling of privileged APIs.