CVE-2023-29444: Uncontrolled Search Path Element in PTC's Kepware KEPServerEX
First published: Wed Jan 10 2024(Updated: )
An uncontrolled search path element vulnerability (DLL hijacking) has been discovered that could allow a locally authenticated adversary to escalate privileges to SYSTEM. Alternatively, they could host a trojanized version of the software and trick victims into downloading and installing their malicious version to gain initial access and code execution.
Credit: ot-cert@dragos.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Ptc Kepware Server | >=6.0.2107.0<=6.14.263.0 | |
| Ptc Kepware Server | >=6.8<=6.14.263.0 | |
| PTC ThingWorx Industrial Connectivity | >=8.0<=8.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2023-29444?
CVE-2023-29444 is classified as a high severity vulnerability due to its potential for privilege escalation.
How can I fix CVE-2023-29444?
To mitigate CVE-2023-29444, update affected software to versions that are not vulnerable, particularly ensuring that PTC KEPServerEX, ThingWorx Kepware Server, and ThingWorx Industrial Connectivity are updated.
What types of systems are affected by CVE-2023-29444?
CVE-2023-29444 affects PTC KEPServerEX, ThingWorx Kepware Server, and ThingWorx Industrial Connectivity in specific version ranges.
Who can exploit CVE-2023-29444?
CVE-2023-29444 can be exploited by a locally authenticated adversary who can potentially escalate privileges to SYSTEM.
What is a DLL hijacking vulnerability like CVE-2023-29444?
DLL hijacking vulnerabilities, such as CVE-2023-29444, occur when an application is tricked into loading malicious DLL files from an untrusted location.
- agent/references
- agent/type
- agent/weakness
- agent/author
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/title
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/ptc
- canonical/ptc kepware server
- version/ptc kepware server/6.0.2107.0
- version/ptc kepware server/6.14.263.0
- version/ptc kepware server/6.8
- canonical/ptc thingworx industrial connectivity
- version/ptc thingworx industrial connectivity/8.0
- version/ptc thingworx industrial connectivity/8.5