Atera records

3 published records for vendor atera.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
31Monitor	CVE-2023-26078No exploit	Privilege escalation vulnerability was discovered in Atera Agent 1.8.4.4 and prior on Windows due to mishandling of privileged APIs.atera · atera Local privilege escalation	High7.8	—	0.6%	Jul 24, 2023
31Monitor	CVE-2023-26077No exploit	Atera Agent through 1.8.3.6 on Windows Creates a Temporary File in a Directory with Insecure Permissions.atera · atera · CWE-276	High7.8	—	0.4%	Jul 24, 2023
31Monitor	CVE-2023-37243No exploit	The C:\Windows\Temp\Agent.Package.Availability\Agent.Package.Availability.exe file is automatically launched as SYSTEM when the system rebooatera · agent package availability · CWE-379 Local privilege escalation	High7.8	—	0.2%	Oct 31, 2023

CVE-2023-26078
31Monitor
Privilege escalation vulnerability was discovered in Atera Agent 1.8.4.4 and prior on Windows due to mishandling of privileged APIs.
HighCVSS 7.8No exploitEPSS 1%
- Local privilege escalation
atera · ateraJul 24, 2023
CVE-2023-26077
31Monitor
Atera Agent through 1.8.3.6 on Windows Creates a Temporary File in a Directory with Insecure Permissions.
HighCVSS 7.8No exploitEPSS 0%
atera · ateraJul 24, 2023
CVE-2023-37243
31Monitor
The C:\Windows\Temp\Agent.Package.Availability\Agent.Package.Availability.exe file is automatically launched as SYSTEM when the system reboo
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
atera · agent package availabilityOct 31, 2023