| |
Vulnerability CVE-2023-34394
Published: 2023-07-19 Modified: 2023-07-20
| Description: |
In Keysight Geolocation Server v2.4.2 and prior, an attacker could upload a specially crafted malicious file or delete any file or directory with SYSTEM privileges due to an improper path validation, which could result in local privilege escalation or a denial-of-service condition.
|
Type:
CWE-23 (Relative Path Traversal)
References: |
https://www.cisa.gov/news-events/ics-advisories/icsa-23-199-02
|
|
|
Copyright 2024, cxsecurity.com
|
|
|
