High severity7.8NVD Advisory· Published Jan 10, 2024· Updated Jun 17, 2026
CVE-2023-29445
CVE-2023-29445
Description
An uncontrolled search path element vulnerability (DLL hijacking) has been discovered that could allow a locally authenticated adversary to escalate privileges to SYSTEM.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
80+ 1 more
- (no CPE)range: 0
- cpe:2.3:a:ptc:kepware_kepserverex:*:*:*:*:*:*:*:*range: >=6.0.2107.0,<=6.14.263.0
0+ 1 more
- (no CPE)range: 0
- cpe:2.3:a:ptc:thingworx_kepware_server:*:*:*:*:*:*:*:*range: >=6.8,<=6.14.263.0
8.0+ 1 more
- (no CPE)range: 8.0
- cpe:2.3:a:ptc:thingworx_industrial_connectivity:*:*:*:*:*:*:*:*range: >=8.0,<=8.5
Patches
Vulnerability mechanics
References
3- www.cisa.gov/news-events/ics-advisories/icsa-23-243-03nvdThird Party AdvisoryUS Government Resource
- www.dragos.com/advisory/ptcs-kepserverex-vulnerabilities/nvdThird Party Advisory
- www.ptc.com/en/support/article/cs399528nvdVendor Advisory
News mentions
0No linked articles in our index yet.