CVE-2024-23773

2024-04-3000:00:00

mitre

www.cve.org

arbitrary file delete

quest kace agent

windows 12.0.38

windows 13.1.23.0

kschedulersvc.exe

local attackers

nt authority\system privileges

AI Score

6.9

Confidence

Low

EPSS

Percentile

10.7%

JSON

An issue was discovered in Quest KACE Agent for Windows 12.0.38 and 13.1.23.0. An Arbitrary file delete vulnerability exists in the KSchedulerSvc.exe component. Local attackers can delete any file of their choice with NT Authority\SYSTEM privileges.

References

support.quest.com/kb/4375402/quest-response-to-kace-sma-agent-vulnerabilities-cve-2024-23772-cve-2024-23773-cve-2024-23774

www.quest.com/kace/