CVE-2024-23773: Path Traversal
An issue was discovered in Quest KACE Agent for Windows 12.0.38 and 13.1.23.0. An Arbitrary file delete vulnerability exists in the KSchedulerSvc.exe component. Local attackers can delete any file of their choice with NT Authority\SYSTEM privileges.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-23773?
CVE-2024-23773 is classified as a critical vulnerability due to its potential impact when exploited.
How do I fix CVE-2024-23773?
To mitigate CVE-2024-23773, update the Quest KACE Agent software to a version higher than 13.1.23.0.
Who is affected by CVE-2024-23773?
CVE-2024-23773 affects users of Quest KACE Agent versions 12.0.38 and 13.1.23.0 on Windows systems.
What type of attack can exploit CVE-2024-23773?
CVE-2024-23773 can be exploited by local attackers to delete any file with NT Authority\SYSTEM privileges.
Is there a workaround for CVE-2024-23773?
Currently, the recommended solution for CVE-2024-23773 is to update the software, as a reliable workaround is not publicly documented.