Lucene search
PRIOn knowledge basePRION:CVE-2023-30897HistoryJun 13, 2023 - 9:15 a.m.
Code injection
2023-06-1309:15:00
PRIOn knowledge base
www.prio-n.com
6
code injection
arbitrary code
privilege escalation
simatic wincc
vulnerability
non-default installation path
A vulnerability has been identified in SIMATIC WinCC (All versions < V7.5.2.13). Affected applications fail to set proper access rights for their installation folder if a non-default installation path was chosen during installation.
This could allow an authenticated local attacker to inject arbitrary code and escalate privileges.
Related
nvd
nvd
CVE-2023-30897
2023-06-13 09:15:17
cvelist
cvelist
CVE-2023-30897
2023-06-13 08:17:11
cve
cve
CVE-2023-30897
2023-06-13 09:15:17
ics
ics
Siemens SIMATIC WinCC V7
2023-06-15 12:00:00
cnvd
cnvd
Siemens SIMATIC WinCC Local Code Execution Vulnerability
2023-06-14 00:00:00