CVE-2023-36853 — Keysight Geolocation Server Exposed Dangerous Method or Function
In Keysight Geolocation Server v2.4.2 and prior, a low privileged attacker could create a local ZIP file containing a malicious script in any location. The attacker could …
Published: 2023-07-19 · CVSS: 7.8 · CVSS 3.1
In Keysight Geolocation Server v2.4.2 and prior, a low privileged attacker could create a local ZIP file containing a malicious script in any location. The attacker could abuse this to load a DLL with SYSTEM privileges.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7