CVE-2023-34982
7.1
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Exploitability: 1.8 / Impact: 5.2
Source: NVD
Description
This external control vulnerability, if exploited, could allow a local OS-authenticated user with standard privileges to delete files with System privilege on the machine where these products are installed, resulting in denial of service.
Affected (40)
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2020 | |
| Before 2020 | |
| Up to 20.1.101 | |
| Up to 3.7.002 | |
| Before 2020 | |
| Before 2020 | |
| Before 2020 | |
| Before 2020 | |
| Before 2020 | |
| Before 2020 | |
| Before 2020 | |
| Version 2020r2 | |
| Before 2020 |
Related CWEs
CWE-610
Externally Controlled Reference to a Resource in Another Sphere
The product uses an externally controlled name or reference that resolves to a resource that is outside of the intended control sphere.
CWE-73
External Control of File Name or Path
The product allows user input to control or influence paths or file names that are used in filesystem operations.
References (4)
Source: ics-cert@hq.dhs.gov
Vendor Advisory
Source: ics-cert@hq.dhs.gov
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource
Timeline
No history available yet.