PT-2023-17046 · Robodk · Robodk

·

CVE-2023-1516

·

Publicado

2023-03-28

·

Atualizado

2023-04-04

CVSS v3.1

7.9

Alta

VetorAV:L/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
Name of the Vulnerable Software and Affected Versions RoboDK versions 5.5.3 and prior
Description The issue is related to an insecure permission assignment to critical directories, which could allow a local user to escalate privileges and write files to the RoboDK process, achieving code execution.
Recommendations For RoboDK versions 5.5.3 and prior, update to a version later than 5.5.3 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Permission

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2023-1516

Produtos afetados

Robodk