High severity · published Apr 30, 2024
CVE-2024-23774
An issue was discovered in Quest KACE Agent for Windows 12.0.38 and 13.1.23.0
7.8
CVSS
0.4%
EPSS
No
On KEV
Description
An issue was discovered in Quest KACE Agent for Windows 12.0.38 and 13.1.23.0. An unquoted Windows search path vulnerability exists in the KSchedulerSvc.exe and AMPTools.exe components. This allows local attackers to execute code of their choice with NT Authority\SYSTEM privileges.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 39% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KS
Kace Systems Management Appliance · Quest
before 13.1.25; before 13.2.24 · source: CISA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-23774
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-23774
support.quest.com
https://support.quest.com/kb/4375402/quest-response-to-kace-sma-agent-vulnerabilities-cve-2024-23772-cve-2024-23773-cve-2024-23774
www.quest.com
https://www.quest.com/kace/
More from Kace Systems Management Appliance
10.0
CVE-2025-32975
Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability
9.8
CVE-2021-32088
An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273
9.8
CVE-2021-32084
An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273
9.8
CVE-2021-32086
An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273
9.8
CVE-2022-29807
A SQL injection vulnerability exists within Quest KACE Systems Management Appliance (SMA) through 12.0 that can allow for remote code execution via download_agent_installer.php