Race Condition Vulnerability in Nessus Agent Could Lead to Arbitrary Code Execution

CVE-2024-3292

What is CVE-2024-3292?

A race condition vulnerability exists in Nessus Agents developed by Tenable, where an authenticated local attacker on a Windows host may exploit weaknesses during the installation process. This vulnerability allows modification of installation parameters, which can enable the execution of arbitrary code on the device. Such manipulation risks the integrity of the system and may result in unauthorized access or disruption of services, necessitating immediate security measures to safeguard against potential exploitation.

References