PT-2024-20078 · Quest · Quest Kace Agent For Windows

Tom Norfolk · Published 2024-04-30 · Updated 2024-11-25 · CVE-2024-23774

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Quest KACE Agent for Windows versions 12.0.38 through 13.1.23.0

Description An unquoted Windows search path issue exists in the KSchedulerSvc.exe and AMPTools.exe components, allowing local attackers to execute code of their choice with NT AuthoritySYSTEM privileges. This issue affects the Quest KACE Agent for Windows, enabling attackers to gain elevated privileges.

Recommendations For version 12.0.38, update to a version that fixes the unquoted Windows search path vulnerability. For version 13.1.23.0, update to a version that fixes the unquoted Windows search path vulnerability. As a temporary workaround, consider disabling the KSchedulerSvc.exe and AMPTools.exe components until a patch is available.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2024-23774

Affected Products

Quest Kace Agent For Windows

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2024-23774 · Security Note
• https://twitter.com/VulmonFeeds/status/1785353724744908874 · Twitter Post
• https://twitter.com/CVEnew/status/1785315290693173440 · Twitter Post
• https://t.me/cvenotify/90070 · Telegram Post
• https://t.me/cvenotify/78593 · Telegram Post
• https://quest.com/kace · Note
• https://twitter.com/SecureAIMobile/status/1861045089285628381 · Twitter Post
• https://support.quest.com/kb/4375402/quest-response-to-kace-sma-agent-vulnerabilities-cve-2024-23772-cve-2024-23773-cve-2024-23774 · Note
• https://t.me/cvenotify/78591 · Telegram Post
• https://t.me/cvenotify/78592 · Telegram Post