CVE-2023-37243CWE-379

The C:\Windows\Temp\Agent.Package.Availability\Agent.Package.Availability.exe file is automatically launched as SYSTEM when the system reboots

High · published October 31, 2023

CVSS v3.1
7.8
EPSS
0%
Percentile
7.0
In the wild
Unconfirmed
What it is

The C:\Windows\Temp\Agent.Package.Availability\Agent.Package.Availability.exe file is automatically launched as SYSTEM when the system reboots. Since the C:\Windows\Temp\Agent.Package.Availability folder inherits permissions from C:\Windows\Temp and Agent.Package.Availability.exe is susceptible to DLL hijacking, standard users can write a malicious DLL to it and elevate their privileges.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00178 · 7.0th percentile
Weakness
CWE-379 · Creation of Temporary File in Directory with Insecure Permissions
Published
2023-10-31T14:34Z
EPSS history
Timeline
  • 31 OCT 14:34Z
    The C:\Windows\Temp\Agent.Package.Availability\Agent.Package.Availability.exe file is automatically launched as SYSTEM when the system reboots
    cvelistv5