Lucene search
HistoryJun 07, 2023 - 10:15 p.m.
CVE-2023-29152
filename parameter
request
file deletion
vuforia server
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
AI Score
7
Confidence
High
EPSS
0.001
Percentile
21.4%
By changing the filename parameter in the request, an attacker could
delete any file with the permissions of the Vuforia server account.
Affected configurations
Node
ptcvuforia_studioRange<9.9
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ptc | vuforia_studio | * | cpe:2.3:a:ptc:vuforia_studio:*:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2023-29152
2023-06-07 22:15:09
prion
prion
Design/Logic Flaw
2023-06-07 22:15:00
cvelist
cvelist
CVE-2023-29152 PTC Vuforia Studio Improper Authorization
2023-06-07 21:46:20
ics
ics
PTC Vuforia Studio
2023-05-11 12:00:00
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
AI Score
7
Confidence
High
EPSS
0.001
Percentile
21.4%
Related for NVD:CVE-2023-29152