RoboDK versions 5.5.3 and prior contain an insecure permission
assignment to critical directories vulnerability, which could allow a
local user to escalate privileges and write files to the RoboDK process
and achieve code execution.
References
| Link | Resource |
|---|---|
| https://robodk.com/contact | Product |
| https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-01 | Third Party Advisory US Government Resource |
Configurations
History
07 Nov 2023, 04:04
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | RoboDK versions 5.5.3 and prior contain an insecure permission assignment to critical directories vulnerability, which could allow a local user to escalate privileges and write files to the RoboDK process and achieve code execution. |
04 Apr 2023, 01:27
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| References | (MISC) https://robodk.com/contact - Product | |
| References | (MISC) https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-01 - Third Party Advisory, US Government Resource | |
| CPE | cpe:2.3:a:robodk:robodk:*:*:*:*:*:*:*:* | |
| CWE | CWE-732 | |
| First Time |
Robodk robodk
Robodk |
Information
Published : 2023-03-28 21:15
Updated : 2023-11-07 04:04
NVD link : CVE-2023-1516
Mitre link : CVE-2023-1516
JSON object : View
Products Affected
robodk
- robodk
CWE
CWE-732
Incorrect Permission Assignment for Critical Resource