Showing 4 vulnerabilities on this page for nessus_agent

Signals CISA KEV Ransomware Nuclei
Tenable vulnerability results
VulnerabilityTitle and contextCVSSEPSSPoCsSignalsSTIX action

Race Condition

A race condition vulnerability exists where an authenticated, local attacker on a Windows Nessus Agent host could modify installation parameters at installation time, which could lead to the execution of arbitrary code on the Nessus host. - CVE-2024-3292

CWE-367May 17, 2024
CVSS8.2v3.1EPSS0.169%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

Privilege Escalation

When installing Nessus Agent to a directory outside of the default location on a Windows host, Nessus Agent versions prior to 10.6.4 did not enforce secure permissions for sub-directories. This could allow for local privilege escalation if users had not secured the directories in the non-default installation location.

CWE-281May 17, 2024
CVSS7.8v3.1EPSS0.175%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

Local Privilege Escalation

As a part of Tenable’s vulnerability disclosure program, a vulnerability in a Nessus plugin was identified and reported. This vulnerability could allow a malicious actor with sufficient permissions on a scan target to place a binary in a specific filesystem location, and abuse the impacted plugin in order to escalate privileges.

CWE-269Mar 18, 2024
CVSS7.8v3.1EPSS0.195%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

Under certain conditions, a low privileged attacker could load a specially crafted file during installation or upgrade to escalate privileges on Windows and Linux hosts.

CWE-269Nov 1, 2023
CVSS6.7v3.1EPSS0.223%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX