Vulnerabilities > N Able > Take Control

DATE CVE VULNERABILITY TITLE RISK
2023-09-11 CVE-2023-27470 Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in N-Able Take Control 7.0.41.1141
BASupSrvcUpdater.exe in N-able Take Control Agent through 7.0.41.1141 before 7.0.43 has a TOCTOU Race Condition via a pseudo-symlink at %PROGRAMDATA%\GetSupportService_N-Central\PushUpdates, leading to arbitrary file deletion.
local
high complexity
n-able CWE-367
7.0