Lucene search
HistoryJan 08, 2024 - 7:15 p.m.
CVE-2023-6631
cve-2023-6631
authorized user
arbitrary code
service path
privilege escalation
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
0.4%
PowerSYSTEM Center versions 2020 Update 16 and prior contain a vulnerability that may allow an authorized local user to insert arbitrary code into the unquoted service path and escalate privileges.
Affected configurations
Node
subnetpowersystem_centerMatch2020-
Related
prion
prion
Design/Logic Flaw
2024-01-08 19:15:00
ics
ics
Subnet Solutions Inc. PowerSYSTEM Center
2023-12-19 12:00:00
cvelist
cvelist
cve
cve
CVE-2023-6631
2024-01-08 19:15:10
openvas
openvas
Microsoft Windows Unquoted Path Vulnerability (SMB Login)
2018-03-23 00:00:00
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
0.4%
Related for NVD:CVE-2023-6631