VYPR
← All advisories
Medium severity6.3NVD Advisory· Published Jan 10, 2024· Updated Jun 17, 2026

CVE-2023-29444

CVE-2023-29444

Description

An uncontrolled search path element vulnerability (DLL hijacking) has been discovered that could allow a locally authenticated adversary to escalate privileges to SYSTEM. Alternatively, they could host a trojanized version of the software and trick victims into downloading and installing their malicious version to gain initial access and code execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • Ptc/PTCllm-create
  • PTC/Kepware KEPServerEXv5
    Range: 0
  • PTC/ThingWorx Kepware Serverv5
    Range: 0
  • PTC/ThingWorx Industrial Connectivityv5
    Range: 8.0
  • Ptc/Kepware Kepserverex
    cpe:2.3:a:ptc:kepware_kepserverex:*:*:*:*:*:*:*:*
    Range: >=6.0.2107.0,<=6.14.263.0
  • Ptc/Thingworx Kepware Server
    cpe:2.3:a:ptc:thingworx_kepware_server:*:*:*:*:*:*:*:*
    Range: >=6.8,<=6.14.263.0
  • Ptc/Thingworx Industrial Connectivity
    cpe:2.3:a:ptc:thingworx_industrial_connectivity:*:*:*:*:*:*:*:*
    Range: >=8.0,<=8.5

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.