PT-2023-17046 · Robodk · Robodk

·

CVE-2023-1516

·

Published

2023-03-28

·

Updated

2023-04-04

CVSS v3.1

7.9

High

VectorAV:L/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
Name of the Vulnerable Software and Affected Versions RoboDK versions 5.5.3 and prior
Description The issue is related to an insecure permission assignment to critical directories, which could allow a local user to escalate privileges and write files to the RoboDK process, achieving code execution.
Recommendations For RoboDK versions 5.5.3 and prior, update to a version later than 5.5.3 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Permission

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2023-1516

Affected Products

Robodk