CVE-2023-29444

Katalog CVE

CVSS 7.3 · High EPSS 0,20%

Kerentanan Uncontrolled Search Path Element pada ptc kepware kepserverex, ptc thingworx kepware server +1 lainnya. Skor CVSS 3.1 7.3 (High) menurut NVD.

Deskripsi (NVD)

An uncontrolled search path element vulnerability (DLL hijacking) has been discovered that could allow a locally authenticated adversary to escalate privileges to SYSTEM. Alternatively, they could host a trojanized version of the software and trick victims into downloading and installing their malicious version to gain initial access and code execution.

Rincian

Terbit di NVD

10 Januari 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.3 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-427: Uncontrolled Search Path Element

EPSS (30 hari)

0,20% peluang dieksploitasi; lebih tinggi dari 8,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.ptc.com/en/support/article/cs399528 advisory vendor
• https://www.cisa.gov/news-events/ics-advisories/icsa-23-243-03 advisory pihak ketiga · pemerintah AS