Lucene search
HistoryJun 07, 2023 - 10:15 p.m.
CVE-2023-29502
cve-2023-29502
vuforia
project import
appconfig.json
resourcedirectory
6.2 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N
4.5 Medium
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
18.9%
Before importing a project into Vuforia, a user could modify the
“resourceDirectory” attribute in the appConfig.json file to be a
different path.
Affected configurations
Node
ptcvuforia_studioRange<9.9
| CPE | Name | Operator | Version |
|---|---|---|---|
| ptc:vuforia_studio | ptc vuforia studio | lt | 9.9 |
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Vuforia Studio",
"vendor": "PTC ",
"versions": [
{
"lessThan": "9.9",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
]Related
nvd
nvd
CVE-2023-29502
2023-06-07 22:15:09
prion
prion
Path traversal
2023-06-07 22:15:00
cvelist
cvelist
CVE-2023-29502 PTC Vuforia Studio Path Traversal
2023-06-07 21:50:29
ics
ics
PTC Vuforia Studio
2023-05-11 12:00:00
6.2 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N
4.5 Medium
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
18.9%
Related for CVE-2023-29502