CVE-2023-27470

BASupSrvcUpdater.exe in N-able Take Control Agent through 7.0.41.1141 before 7.0.43 has a TOCTOU Race Condition via a pseudo-symlink at…

published September 11, 2023

CVSS
—
EPSS
1%
Percentile
43.7
In the wild
Unconfirmed
What it is

BASupSrvcUpdater.exe in N-able Take Control Agent through 7.0.41.1141 before 7.0.43 has a TOCTOU Race Condition via a pseudo-symlink at %PROGRAMDATA%\GetSupportService_N-Central\PushUpdates, leading to arbitrary file deletion.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00526 · 43.7th percentile
Published
2023-09-11T00:00Z
EPSS history
Timeline
  • 11 SEP 00:00Z
    BASupSrvcUpdater.exe in N-able Take Control Agent through 7.0.41.1141 before 7.0.43 has a TOCTOU Race Condition via a pseudo-symlink at…
    cvelistv5