Path traversal

2024-01-1021:15:00

PRIOn knowledge base

www.prio-n.com

path traversal

uncontrolled search

local adversary

7.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

0.4%

JSON

An uncontrolled search path element vulnerability (DLL hijacking) has been discovered that could allow a locally authenticated adversary to escalate privileges to SYSTEM.

CPENameOperatorVersion
kepware_kepserverexge6.0.2107.0
kepware_kepserverexle6.14.263.0
thingworx_industrial_connectivityge8.0
thingworx_industrial_connectivityle8.5
thingworx_kepware_serverge6.8
thingworx_kepware_serverle6.14.263.0

Name	Operator	Version
kepware_kepserverex	ge	6.0.2107.0
kepware_kepserverex	le	6.14.263.0
thingworx_industrial_connectivity	ge	8.0
thingworx_industrial_connectivity	le	8.5
thingworx_kepware_server	ge	6.8
thingworx_kepware_server	le	6.14.263.0