CVE-2023-29444: Uncontrolled Search Path Element in PTC's Kepware KEPServerEX
An uncontrolled search path element vulnerability (DLL hijacking) has been discovered that could allow a locally authenticated adversary to escalate privileges to SYSTEM. Alternatively, they could host a trojanized version of the software and trick victims into downloading and installing their malicious version to gain initial access and code execution.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-29444?
CVE-2023-29444 is classified as a high severity vulnerability due to its potential for privilege escalation.
How can I fix CVE-2023-29444?
To mitigate CVE-2023-29444, update affected software to versions that are not vulnerable, particularly ensuring that PTC KEPServerEX, ThingWorx Kepware Server, and ThingWorx Industrial Connectivity are updated.
What types of systems are affected by CVE-2023-29444?
CVE-2023-29444 affects PTC KEPServerEX, ThingWorx Kepware Server, and ThingWorx Industrial Connectivity in specific version ranges.
Who can exploit CVE-2023-29444?
CVE-2023-29444 can be exploited by a locally authenticated adversary who can potentially escalate privileges to SYSTEM.
What is a DLL hijacking vulnerability like CVE-2023-29444?
DLL hijacking vulnerabilities, such as CVE-2023-29444, occur when an application is tricked into loading malicious DLL files from an untrusted location.