CVE-2023-1516

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-1516
RoboDK versions 5.5.3 and prior contain an insecure permission assignment to critical directories vulnerability, which could allow a local user to escalate privileges and write files to the RoboDK process and achieve code execution.  

7.9 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.5 / Impact : 4.7

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References
Link Resource
https://robodk.com/contact Product
https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-01 Third Party Advisory US Government Resource
https://robodk.com/contact Product
https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-01 Third Party Advisory US Government Resource
Configurations

Configuration 1 (hide)

cpe:2.3:a:robodk:robodk:*:*:*:*:*:*:*:*
History

21 Nov 2024, 07:39

Type Values Removed Values Added
References () https://robodk.com/contact - Product () https://robodk.com/contact - Product
References () https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-01 - Third Party Advisory, US Government Resource () https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-01 - Third Party Advisory, US Government Resource
CVSS v2 : unknown
v3 : 7.8 		v2 : unknown
v3 : 7.9

07 Nov 2023, 04:04

Type Values Removed Values Added
Summary RoboDK versions 5.5.3 and prior contain an insecure permission assignment to critical directories vulnerability, which could allow a local user to escalate privileges and write files to the RoboDK process and achieve code execution. RoboDK versions 5.5.3 and prior contain an insecure permission assignment to critical directories vulnerability, which could allow a local user to escalate privileges and write files to the RoboDK process and achieve code execution.  

04 Apr 2023, 01:27

Type Values Removed Values Added
First Time Robodk robodk
Robodk
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
CWE CWE-732
References (MISC) https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-01 - (MISC) https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-01 - Third Party Advisory, US Government Resource
References (MISC) https://robodk.com/contact - (MISC) https://robodk.com/contact - Product
CPE cpe:2.3:a:robodk:robodk:*:*:*:*:*:*:*:*

28 Mar 2023, 21:15

Type Values Removed Values Added
New CVE
Information

Published : 2023-03-28 21:15

Updated : 2024-11-21 07:39

NVD link : CVE-2023-1516

Mitre link : CVE-2023-1516

CVE.ORG link : CVE-2023-1516

JSON object : View

Products Affected

robodk

  • robodk
CWE
CWE-732

Incorrect Permission Assignment for Critical Resource