CVE-2023-6132CWE-427

AVEVA Edge products Uncontrolled Search Path Element

High · published February 29, 2024

CVSS v3.1
7.3
EPSS
0%
Percentile
8.5
In the wild
Unconfirmed
What it is

The vulnerability, if exploited, could allow a malicious entity with access to the file system to achieve arbitrary code execution and privilege escalation by tricking AVEVA Edge to load an unsafe DLL.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00193 · 8.5th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2024-02-29T17:40Z
EPSS history
Timeline
  • 29 FEB 17:40Z
    AVEVA Edge products Uncontrolled Search Path Element
    cvelistv5