CVE-2024-3290

Summary

CVE-2024-3290 is a newly identified vulnerability affecting the Nessus vulnerability scanner running on Windows. An authenticated, local attacker can exploit a race condition in the software during installation, allowing them to manipulate installation parameters and execute arbitrary code on the vulnerable Nessus host. This could potentially result in unauthorized access, data theft, or further system compromise. Users are strongly urged to apply the forthcoming patch from Tenable, the vendor of Nessus, to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.