Vulnerabilities

TI-2023-18873 CVE-2023-37243 · GHSA-x5gm-xw9r-m7h2

The C:\Windows\Temp\Agent.Package.Availability\Agent.Package.Availability.exe file is…

LOW 35

The C:\Windows\Temp\Agent.Package.Availability\Agent.Package.Availability.exe file is automatically launched as SYSTEM when the system reboots.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00192 Published 2023-10-31 No fix listed CWE-379

TI-2023-11311 CVE-2023-26078 · GHSA-5v7f-353x-hqpg

HIGH 69

Privilege escalation vulnerability was discovered in Atera Agent 1.8.4.4 and prior on Windows due to mishandling of privileged APIs.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00557 Published 2023-07-24 No fix listed

TI-2023-11310 CVE-2023-26077 · GHSA-23jp-25jg-2qj5

LOW 36

Atera Agent through 1.8.3.6 on Windows Creates a Temporary File in a Directory with Insecure Permissions.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00381 Published 2023-07-24 No fix listed CWE-276