This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2023-37243 | BDVDB-2026-215637 Detail

AteraAtera Agent Package Availability

Description#

The C:\Windows\Temp\Agent.Package.Availability\Agent.Package.Availability.exe file is automatically launched as SYSTEM when the system reboots. Since the C:\Windows\Temp\Agent.Package.Availability folder inherits permissions from C:\Windows\Temp and Agent.Package.Availability.exe is susceptible to DLL hijacking, standard users can write a malicious DLL to it and elevate their privileges.

Impact#

CAPEC-69 Target Programs with Elevated Privileges

Weaknesses#

  • CWE-379 Creation of Temporary File in Directory with Insecure Permissions

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.