Lucene search
HistoryJun 07, 2023 - 10:15 p.m.
CVE-2023-29152
cve-2023-29152
vuforia
file deletion
server account
8.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
8 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
21.4%
By changing the filename parameter in the request, an attacker could
delete any file with the permissions of the Vuforia server account.
Affected configurations
Node
ptcvuforia_studioRange<9.9
| CPE | Name | Operator | Version |
|---|---|---|---|
| ptc:vuforia_studio | ptc vuforia studio | lt | 9.9 |
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Vuforia Studio",
"vendor": "PTC ",
"versions": [
{
"lessThan": "9.9",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
]Related
prion
prion
Design/Logic Flaw
2023-06-07 22:15:00
nvd
nvd
CVE-2023-29152
2023-06-07 22:15:09
cvelist
cvelist
CVE-2023-29152 PTC Vuforia Studio Improper Authorization
2023-06-07 21:46:20
ics
ics
PTC Vuforia Studio
2023-05-11 12:00:00
8.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
8 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
21.4%
Related for CVE-2023-29152