Lucene search

K
cvelistMitreCVELIST:CVE-2023-27470
HistorySep 11, 2023 - 12:00 a.m.

CVE-2023-27470

2023-09-1100:00:00
mitre
www.cve.org
1
cve-2023-27470
toctou race condition
pseudo-symlink
arbitrary file deletion
getsupportservice_n-central

0.0004 Low

EPSS

Percentile

9.0%

BASupSrvcUpdater.exe in N-able Take Control Agent through 7.0.41.1141 before 7.0.43 has a TOCTOU Race Condition via a pseudo-symlink at %PROGRAMDATA%\GetSupportService_N-Central\PushUpdates, leading to arbitrary file deletion.

0.0004 Low

EPSS

Percentile

9.0%

Related for CVELIST:CVE-2023-27470