Approved changes feed: RSS · Atom

cpe:2.3:a:n-able:automation_manager:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorN Able (a455ff79-fc53-5101-90dc-1c3ee5e2a8d1)
ProductAutomation Manager (53fc91f5-8399-555c-9b23-97d1528f5c24)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-37244 vulnerable 2026-06-08 06:08:14.995229 Privilege escalation in N-Able's AutomationManagerAgent
MEDIUM (5.3)
The affected AutomationManager.AgentService.exe application contains a TOCTOU race condition vulnerability that allows standard users to create a pseudo-symlink at C:\ProgramData\N-Able Technologies\AutomationManager\Temp, which could be leveraged by an attacker to manipulate the process into performing arbitrary file deletions. We recommend upgrading to version 2.91.0.0
Published: 2024-05-02T13:21:28.227Z
Updated: 2024-08-02T17:09:33.280Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.