CVE-2024-3292: Race Condition

Published May 17, 2024

Updated

A race condition vulnerability exists where an authenticated, local attacker on a Windows Nessus Agent host could modify installation parameters at installation time, which could lead to the execution of arbitrary code on the Nessus host. - CVE-2024-3292

Affected Software

1 affected component

Tenable Nessus Agent

Remediation

Information

Tenable has released Nessus Agent 10.6.4 to address these issues. The installation files can be obtained from the Tenable Downloads Portal ( https://www.tenable.com/downloads/nessus-agents ).

Event History

May 17, 2024

CVE Published

via MITRE·05:17 PM

Data Sourced

via MITRE·05:17 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·06:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-3292?

CVE-2024-3292 has been assigned a high severity rating due to its potential to allow arbitrary code execution.

How do I fix CVE-2024-3292?

To fix CVE-2024-3292, update the Tenable Nessus Agent to the latest version provided by Tenable.

Who is affected by CVE-2024-3292?

CVE-2024-3292 affects authenticated users on systems running the Tenable Nessus Agent.

Can CVE-2024-3292 be exploited remotely?

CVE-2024-3292 cannot be exploited remotely as it requires local access to the affected system.

What are the potential consequences of CVE-2024-3292?

Exploitation of CVE-2024-3292 could lead to unauthorized execution of arbitrary code, compromising system integrity.