CVE-2023-34394
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
In Keysight Geolocation Server v2.4.2 and prior, an attacker could upload a specially crafted malicious file or delete any file or directory with SYSTEM privileges due to improper path validation, which could result in local privilege escalation or a denial-of-service condition.
Risk Assessment
The organization may be exposed to privilege escalation, allowing attackers to gain full control over the system, as well as potential service availability interruptions.
Recommendation
It is recommended to update the Keysight Geolocation Server to the latest version and implement appropriate security mechanisms to prevent unauthorized file access.
Other vulnerabilities in Keysight Geolocation Server
Original NVD description (English source)
In Keysight Geolocation Server v2.4.2 and prior, an attacker could upload a specially crafted malicious file or delete any file or directory with SYSTEM privileges due to an improper path validation, which could result in local privilege escalation or a denial-of-service condition.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS