Management Agent
Monthly
Local privilege escalation in ESET Management Agent for Windows allows a high-privileged local attacker to execute arbitrary code at elevated system-level privileges by exploiting a time-of-check time-of-use (TOCTOU) race condition in the agent's temporary batch file handling. The vulnerability was self-disclosed by ESET and addressed via customer advisory CA8913. No public exploits have been identified and an EPSS score of 0.02% (4th percentile) reflects negligible current exploitation in the wild.
The Symantec Management Agent is susceptible to a privilege escalation vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.
Local privilege escalation in ESET Management Agent for Windows allows a high-privileged local attacker to execute arbitrary code at elevated system-level privileges by exploiting a time-of-check time-of-use (TOCTOU) race condition in the agent's temporary batch file handling. The vulnerability was self-disclosed by ESET and addressed via customer advisory CA8913. No public exploits have been identified and an EPSS score of 0.02% (4th percentile) reflects negligible current exploitation in the wild.
The Symantec Management Agent is susceptible to a privilege escalation vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.