CVE-2023-34394CWE-23

Keysight N6845A Relative Path Traversal

High · published July 19, 2023

CVSS v3.1
7.8
EPSS
0%
Percentile
14.9
In the wild
Unconfirmed
What it is

In Keysight Geolocation Server v2.4.2 and prior, an attacker could upload a specially crafted malicious file or delete any file or directory with SYSTEM privileges due to an improper path validation, which could result in local privilege escalation or a denial-of-service condition.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00245 · 14.9th percentile
Weakness
CWE-23 · Relative Path Traversal
Published
2023-07-19T21:55Z
EPSS history
Timeline
  • 19 JUL 21:55Z
    Keysight N6845A Relative Path Traversal
    cvelistv5