Kace Systems Management Appliance Security Vulnerabilities and Issues — Kace Systems Management Appliance CVE List

Lucene search

QuestKace Systems Management Appliance

3 matches found

CVE•added 2022/08/02 10:15 p.m.•61 views

CVE-2022-29808

In Quest KACE Systems Management Appliance (SMA) through 12.0, predictable token generation occurs when appliance linking is enabled.

7.5CVSS7.5AI score0.00281EPSS

CVE•added 2024/04/30 2:15 p.m.•56 views

CVE-2024-23773

An issue was discovered in Quest KACE Agent for Windows 12.0.38 and 13.1.23.0. An Arbitrary file delete vulnerability exists in the KSchedulerSvc.exe component. Local attackers can delete any file of their choice with NT Authority\SYSTEM privileges.

7.8CVSS6.9AI score0.00245EPSS

CVE•added 2024/04/30 2:15 p.m.•55 views

CVE-2024-23774

An issue was discovered in Quest KACE Agent for Windows 12.0.38 and 13.1.23.0. An unquoted Windows search path vulnerability exists in the KSchedulerSvc.exe and AMPTools.exe components. This allows local attackers to execute code of their choice with NT Authority\SYSTEM privileges.

7.8CVSS7.1AI score0.00381EPSS