CVE-2023-1516

2023-03-2821:15:10

CWE-732

[email protected]

web.nvd.nist.gov

robodk

cve-2023-1516

security

permission assignment

vulnerability

code execution

7.9 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N

7.9 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

0.4%

JSON

RoboDK versions 5.5.3 and prior contain an insecure permission
assignment to critical directories vulnerability, which could allow a
local user to escalate privileges and write files to the RoboDK process
and achieve code execution.

Affected configurations

NVD

Node

robodkrobodkRange≤5.5.3

CPENameOperatorVersion
robodk:robodkrobodkle5.5.3

CPE	Name	Operator	Version
robodk:robodk	robodk	le	5.5.3

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "RoboDK ",
    "vendor": "RoboDK ",
    "versions": [
      {
        "lessThanOrEqual": "5.5.3",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]