Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-27470
HistorySep 11, 2023 - 3:15 p.m.

Race condition

2023-09-1115:15:00
PRIOn knowledge base
www.prio-n.com
11
basupsrvcupdater.exe
n-able take control agent
toctou race condition
pseudo-symlink
programdata
getsupportservice_n-central
pushupdates
arbitrary file deletion

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

BASupSrvcUpdater.exe in N-able Take Control Agent through 7.0.41.1141 before 7.0.43 has a TOCTOU Race Condition via a pseudo-symlink at %PROGRAMDATA%\GetSupportService_N-Central\PushUpdates, leading to arbitrary file deletion.

CPENameOperatorVersion
take_controllt7.0.43

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

Related for PRION:CVE-2023-27470