CVE-2023-31200: PTC Vuforia Studio Cross-Site Request Forgery

Q: What is CVE-2023-31200?

CVE-2023-31200 is a vulnerability in PTC Vuforia Studio that does not require a token, allowing a local attacker to perform cross-site request forgery or replay attacks.

Q: How severe is CVE-2023-31200?

CVE-2023-31200 has a severity rating of 8, which is considered high.

Q: What is PTC Vuforia Studio?

PTC Vuforia Studio is a software suite used for creating and deploying augmented reality (AR) experiences.

Q: How does CVE-2023-31200 affect PTC Vuforia Studio?

CVE-2023-31200 affects PTC Vuforia Studio by not requiring a token, potentially enabling local attackers to perform CSRF or replay attacks.

Q: How can I fix CVE-2023-31200?

To fix CVE-2023-31200, it is recommended to update PTC Vuforia Studio to a version that includes a fix for the vulnerability.

Published Jun 7, 2023

Updated

PTC Vuforia Studio does not require a token; this could allow an attacker with local access to perform a cross-site request forgery attack or a replay attack.

Affected Software

2 affected components

PTC Vuforia Studio<9.9

PTC Vuforia Studio: all versions prior to 9.9

Remediation

Information

PTC recommends users upgrade to Vuforia Studio release 9.9 https://support.ptc.com/help/vuforia/studio/en/ or higher.

Event History

Jun 7, 2023

CVE Published

via MITRE·09:52 PM

Data Sourced

via MITRE·09:52 PM

RemedyDescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

ICSA-23-131-13

Frequently Asked Questions

What is CVE-2023-31200?

CVE-2023-31200 is a vulnerability in PTC Vuforia Studio that does not require a token, allowing a local attacker to perform cross-site request forgery or replay attacks.

How severe is CVE-2023-31200?

CVE-2023-31200 has a severity rating of 8, which is considered high.

What is PTC Vuforia Studio?