Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
Atera records in CISA KEVNo Atera vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 69
Privilege escalation vulnerability was discovered in Atera Agent 1.8.4.4 and prior on Windows due to mishandling of privileged APIs.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00557 · Published 2023-07-24 · No fix listed
Priority LOW 36
Atera Agent through 1.8.3.6 on Windows Creates a Temporary File in a Directory with Insecure Permissions.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00381 · Published 2023-07-24 · No fix listed CWE-276
Priority LOW 35
The C:\Windows\Temp\Agent.Package.Availability\Agent.Package.Availability.exe file is automatically launched as SYSTEM when the system reboots.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00192 · Published 2023-10-31 · No fix listed CWE-379
