VULNERABILITY INTELLIGENCE
CVE-2024-23774
CVSS score7.8 HIGH
EPSS probability0.44%
CISA KEVNot currently listed
Published2024-04-30
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
An issue was discovered in Quest KACE Agent for Windows 12.0.38 and 13.1.23.0. An unquoted Windows search path vulnerability exists in the KSchedulerSvc.exe and AMPTools.exe components. This allows local attackers to execute code of their choice with NT Authority\SYSTEM privileges.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-22