CVE-2023-37243 | BDVDB-2026-215637 Detail
AteraAtera Agent Package Availability
Description#
The C:\Windows\Temp\Agent.Package.Availability\Agent.Package.Availability.exe file is automatically launched as SYSTEM when the system reboots. Since the C:\Windows\Temp\Agent.Package.Availability folder inherits permissions from C:\Windows\Temp and Agent.Package.Availability.exe is susceptible to DLL hijacking, standard users can write a malicious DLL to it and elevate their privileges.
Impact#
CAPEC-69 Target Programs with Elevated Privileges
Weaknesses#
- CWE-379 Creation of Temporary File in Directory with Insecure Permissions
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.