CVE-2024-2390: Privilege Escalation in Nessus Agent Plugin

Successful exploitation of CVE-2024-2390 could grant an attacker elevated privileges on the targeted system. This could allow them to bypass security controls, access sensitive data, install malware, or even gain complete control of the system. The specific impact depends on the permissions the attacker already possesses and the capabilities of the binary they place. This vulnerability highlights the importance of securing scan targets and ensuring that only trusted binaries are present on those systems. The ability to escalate privileges within a scanning environment could also be leveraged to compromise other systems within the network.

1. Reserved2024-03-11
2. Published2024-03-18
3. Modified2024-08-21
4. EPSS updated2026-04-02

The primary mitigation for CVE-2024-2390 is to upgrade the Nessus Agent Plugin to version #202403142053 or later. This patched version addresses the vulnerability by preventing the malicious placement and exploitation of binaries. Prior to upgrading, assess the potential impact on existing scans and ensure compatibility with the Nessus scanner. If an immediate upgrade is not feasible, consider restricting file system access on scan targets to prevent unauthorized binary placement. Regularly review file system permissions and audit logs for suspicious activity.