Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-12410

Опубликовано: 26 мар. 2018
Источник: nvd
CVSS3: 7.4
CVSS2: 6.9
EPSS Низкий

Описание

It is possible to exploit a Time of Check & Time of Use (TOCTOU) vulnerability by winning a race condition when Kaseya Virtual System Administrator agent 9.3.0.11 and earlier tries to execute its binaries from working and/or temporary folders. Successful exploitation results in the execution of arbitrary programs with "NT AUTHORITY\SYSTEM" privileges.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:kaseya:virtual_system_administrator:*:*:*:*:*:*:*:*
Версия до 9.3.0.11 (включая)

EPSS

Процентиль: 12%
0.0004
Низкий

7.4 High

CVSS3

6.9 Medium

CVSS2

Дефекты

CWE-362

Связанные уязвимости

CVSS3: 7.4
github
больше 3 лет назад

It is possible to exploit a Time of Check & Time of Use (TOCTOU) vulnerability by winning a race condition when Kaseya Virtual System Administrator agent 9.3.0.11 and earlier tries to execute its binaries from working and/or temporary folders. Successful exploitation results in the execution of arbitrary programs with "NT AUTHORITY\SYSTEM" privileges.

EPSS

Процентиль: 12%
0.0004
Низкий

7.4 High

CVSS3

6.9 Medium

CVSS2

Дефекты

CWE-362