PT-2021-23813 · Automox · Automox Agent

Greg Foss · Published 2021-12-15 · Updated 2022-03-29 · CVE-2021-43326

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Automox Agent versions prior to 32

Description The issue arises from incorrect permission settings on a temporary directory by the Automox Agent on Windows systems.

Recommendations For versions prior to 32, update to version 32 or later to resolve the issue.

Exploit

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2021-43326

Affected Products

Automox Agent

References · 7

• 🔥 https://github.com/gfoss/CVE-2021-43326_Exploit · Exploit
• 🔥 https://exploit-db.com/exploits/50642 · Exploit
• 🔥 http://packetstormsecurity.com/files/165449/Automox-Agent-32-Local-Privilege-Escalation.html · Exploit
• https://support.automox.com/help/release-notes · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-43326 · Security Note
• https://community.automox.com/product-updates-4/cve-2021-43326-and-cve-2021-43325-local-privilege-escalation-in-automox-agent-windows-only-1636 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-43326 · Vendor Advisory