TI-2023-24176 Aliases CVE-2023-45160 GHSA-v69j-q2rv-25rq

Elevated Temp Directory Execution in 1E Client

MEDIUM 42CWE-552Published 2023-10-05 · Updated 2025-06-18

Key facts

Attack vector: Network
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: Information disclosure
Confidentiality · integrity · availability: High · High · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-552.

Summary

In the affected version of the 1E Client, an ordinary user could subvert downloaded instruction resource files, e.g., to substitute a harmful script. by replacing a resource script file created by an instruction at run time with a malicious script. The 1E Client's temporary directory is now locked down in the released patch. Resolution: This has been fixed in patch Q23094 This issue has also been fixed in the Mac Client in updated versions of Non-Windows release v8.1.2.62 - please re-download from the 1E Support site. Customers with Mac Client versions higher than v8.1 will need to upgrade to v23.11 to remediate this vulnerability.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00878 59th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
1E	1E Client	up to 8.1.2.62; up to 8.4.1.159; up to 9.0.1.88; up to 23.7.1.151	—	No fix listed	CNA

1E Client Vendor1E Affected up to 8.1.2.62; up to 8.4.1.159; up to 9.0.1.88; up to 23.7.1.151 Fixed in — No fix listed CNA

CPE configurations NVD · 4

CPE	Versions	Role	Vendor
cpe:2.3:a:1e:client:8.1.2.62:::::windows::	8.1.2.62	Vulnerable	1E
cpe:2.3:a:1e:client:8.4.1.159:::::windows::	8.4.1.159	Vulnerable	1E
cpe:2.3:a:1e:client:9.0.1.88:::::windows::	9.0.1.88	Vulnerable	1E
cpe:2.3:a:1e:client:23.7.1.151:::::windows::	23.7.1.151	Vulnerable	1E

cpe:2.3:a:1e:client:8.1.2.62:*:*:*:*:windows:*:* Versions 8.1.2.62 Vulnerable ·1E
cpe:2.3:a:1e:client:8.4.1.159:*:*:*:*:windows:*:* Versions 8.4.1.159 Vulnerable ·1E
cpe:2.3:a:1e:client:9.0.1.88:*:*:*:*:windows:*:* Versions 9.0.1.88 Vulnerable ·1E
cpe:2.3:a:1e:client:23.7.1.151:*:*:*:*:windows:*:* Versions 23.7.1.151 Vulnerable ·1E

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2023-45160
2026-10-03 Alias added: GHSA-v69j-q2rv-25rq

References

Advisory 1

https://www.1e.com/trust-security-compliance/cve-info/

Other 1

https://www.teamviewer.com/en/resources/trust-center/security-bulletins/1e-2023-2002/

TI-2020-16761 The Inventory module of the 1E Client 5.0.0.745 doesn't handle an unquoted path when… CVSS 3.1HIGH 8.8
TI-2020-12794 The MSI installer in 1E Client 4.1.0.267 and 5.0.0.745 allows remote authenticated users… CVSS 3.1HIGH 8.8
TI-2020-16760 The Inventory module of the 1E Client 5.0.0.745 doesn't handle an unquoted path when… CVSS 3.1HIGH 8.8
TI-2023-24175 Link following in 1E Client CVSS 3.1HIGH 8.4
TI-2020-16759 The %PROGRAMDATA%\1E\Client directory in 1E Client 5.0.0.745 and 4.1.0.267 allows remote… CVSS 3.1MEDIUM 6.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences