Description
In Keysight Geolocation Server v2.4.2 and prior, an attacker could upload a specially crafted malicious file or delete any file or directory with SYSTEM privileges due to an improper path validation, which could result in local privilege escalation or a denial-of-service condition.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Keysight Technologies | N6845A Geolocation Server | ≤ 2.4.2 | — |
Advisories 1
- ICSA-23-199-02 Keysight N6845A Geolocation Server CISA ICS & IT advisories · Jul 18, 2023