VYPR
← All advisories
Medium severity6.3NVD Advisory· Published Jan 10, 2024· Updated Jun 17, 2026

CVE-2023-29444

CVE-2023-29444

Description

An uncontrolled search path element vulnerability (DLL hijacking) has been discovered that could allow a locally authenticated adversary to escalate privileges to SYSTEM. Alternatively, they could host a trojanized version of the software and trick victims into downloading and installing their malicious version to gain initial access and code execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • Ptc/Kepware Kepserverexcpe-rescue2 versions
    0+ 1 more
    • (no CPE)range: 0
    • cpe:2.3:a:ptc:kepware_kepserverex:*:*:*:*:*:*:*:*range: >=6.0.2107.0,<=6.14.263.0
  • Ptc/Thingworx Kepware Servercpe-rescue2 versions
    0+ 1 more
    • (no CPE)range: 0
    • cpe:2.3:a:ptc:thingworx_kepware_server:*:*:*:*:*:*:*:*range: >=6.8,<=6.14.263.0
  • Ptc/Thingworx Industrial Connectivitycpe-rescue2 versions
    8.0+ 1 more
    • (no CPE)range: 8.0
    • cpe:2.3:a:ptc:thingworx_industrial_connectivity:*:*:*:*:*:*:*:*range: >=8.0,<=8.5
  • Ptc/PTCllm-create

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.