CVE-2023-27133: Critical severity tsplus remote work vulnerability
TSplus Remote Work 16.0.0.0 has weak permissions for .exe, .js, and .html files under the %PROGRAMFILES(X86)%\TSplus-RemoteWork\Clients\www folder. This may enable privilege escalation if a different local user modifies a file. NOTE: CVE-2023-31067 and CVE-2023-31068 are only about the TSplus Remote Access product, not the TSplus Remote Work product.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-27133?
CVE-2023-27133 is a vulnerability in TSplus Remote Work 16.0.0.0 that allows local users to escalate privileges by modifying certain files.
What is the severity of CVE-2023-27133?
CVE-2023-27133 has a severity rating of 9.8, which is considered critical.
How does CVE-2023-27133 impact TSplus Remote Work 16.0.0.0?
CVE-2023-27133 impacts TSplus Remote Work 16.0.0.0 by allowing local users to modify files and potentially escalate privileges.
How can I fix CVE-2023-27133?
To fix CVE-2023-27133, apply the necessary permissions to the .exe, .js, and .html files under the %PROGRAMFILES(X86)%\TSplus-RemoteWork\Clients\www folder for TSplus Remote Work 16.0.0.0.
Is there any additional information about CVE-2023-27133?
Yes, you can find additional information about CVE-2023-27133 at https://packetstormsecurity.com/files/174272.