Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2024-0259

Privilege Escalation in Robot Schedule Enterprise Agent for Windows prior to version 3.04

Description

Fortra's Robot Schedule Enterprise Agent for Windows prior to version 3.04 is susceptible to privilege escalation. A low-privileged user can overwrite the service executable. When the service is restarted, the replaced binary runs with local system privileges, allowing a low-privileged user to gain elevated privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Fortra Robot Schedule Enterprise Agent

Default version status: unaffected

  • 2.0 to < 3.04affected

References