CVE-2023-29444 — Uncontrolled Search Path Element in PTC's Kepware KEPServerEX
An uncontrolled search path element vulnerability (DLL hijacking) has been discovered that could allow a locally authenticated adversary to escalate privileges to SYSTEM. Altern…
Published: 2024-01-10 · CVSS: 6.3 · CVSS 3.1
An uncontrolled search path element vulnerability (DLL hijacking) has been discovered that could allow a locally authenticated adversary to escalate privileges to SYSTEM. Alternatively, they could host a trojanized version of the software and trick victims into downloading and installing their malicious version to gain initial access and code execution.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7