CVE-2023-24476: PTC Vuforia Studio Improper Authorization

Q: What is CVE-2023-24476?

CVE-2023-24476 is a vulnerability that allows an attacker with local access to the machine to record traffic and resend requests without proper authentication.

Q: How does CVE-2023-24476 affect PTC Vuforia Studio?

CVE-2023-24476 affects versions of PTC Vuforia Studio up to exclusive version 9.9.

Q: What is the severity of CVE-2023-24476?

CVE-2023-24476 has a low severity rating with a severity value of 3.3.

Q: How can an attacker exploit CVE-2023-24476?

An attacker with local access to the machine can record traffic and use it to resend requests without proper authentication.

Q: Is there a fix for CVE-2023-24476?

At the moment, there is no known fix for CVE-2023-24476. It is recommended to follow any advice or updates from the software vendor.

Published Jun 7, 2023

Updated

An attacker with local access to the machine could record the traffic, which could allow them to resend requests without the server authenticating that the user or session are valid.

Affected Software

2 affected components

PTC Vuforia Studio<9.9

PTC Vuforia Studio: all versions prior to 9.9

Remediation

Information

PTC recommends users upgrade to Vuforia Studio release 9.9 https://support.ptc.com/help/vuforia/studio/en/ or higher.

Event History

Jun 7, 2023

CVE Published

via MITRE·09:44 PM

Data Sourced

via MITRE·09:44 PM

RemedyDescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

ICSA-23-131-13

Frequently Asked Questions

What is CVE-2023-24476?

CVE-2023-24476 is a vulnerability that allows an attacker with local access to the machine to record traffic and resend requests without proper authentication.

How does CVE-2023-24476 affect PTC Vuforia Studio?

CVE-2023-24476 affects versions of PTC Vuforia Studio up to exclusive version 9.9.

What is the severity of CVE-2023-24476?