CVE-2024-0259

HIGH EPSS 20.1%
Published Mar 28, 20242y ago · Modified Jun 17, 20262w ago
7.3 CVSS 3.1
High
Find Similar
Published Mar 28, 2024 2y ago
Last Modified Jun 17, 2026 2w ago

Description

Fortra's Robot Schedule Enterprise Agent for Windows prior to version 3.04 is susceptible to privilege escalation. A low-privileged user can overwrite the service executable. When the service is restarted, the replaced binary runs with local system privileges, allowing a low-privileged user to gain elevated privileges.

CVSS Details

Base Score
7.3
Exploitability
1.3
Impact
5.9
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction Required
Scope Unchanged
Confidentiality High
Integrity High
Availability High

Threat Intelligence

EPSS Exploit Probability
20.1% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-276

Affected Products 2

VendorProductVersionRange
fortrarobot_schedule* <3.04
microsoftwindows*any

References 2

  • hstechdocs.helpsystems.com https://hstechdocs.helpsystems.com/releasenotes/Content/_ProductPages/Robot/RobotScheduleEnterprise.htm
    Release Notes
  • fortra.com https://www.fortra.com/security/advisory/fi-2024-005
    Vendor Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.