The affected AutomationManager.AgentService.exe application contains a TOCTOU race condition vulnerability that allows standard users to create a pseudo-symlink at C:\ProgramData\N-Able Technologies\AutomationManager\Temp, which could be leveraged by an attacker to manipulate the process into...
5.3CVSS
7.3AI Score
0.0004EPSS
An issue discovered in N-able N-central before 2023.6 and earlier allows attackers to gain escalated privileges via API...
9.8CVSS
7.6AI Score
0.001EPSS
The N-able PassPortal extension before 3.29.2 for Chrome inserts sensitive information into a log...
7.5CVSS
6.9AI Score
0.001EPSS
BASupSrvcUpdater.exe in N-able Take Control Agent through 7.0.41.1141 before 7.0.43 has a TOCTOU Race Condition via a pseudo-symlink at %PROGRAMDATA%\GetSupportService_N-Central\PushUpdates, leading to arbitrary file...
7CVSS
6.8AI Score
0.0004EPSS
An issue found in N-able Technologies N-central Server before 2023.4 allows a local attacker to execute arbitrary code via the monitoring function of the...
7CVSS
7.1AI Score
0.0004EPSS