Description
In Keysight Geolocation Server v2.4.2 and prior, a low privileged attacker could create a local ZIP file containing a malicious script in any location. The attacker could abuse this to load a DLL with SYSTEM privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Keysight Technologies | N6845A Geolocation Server | ≤ 2.4.2 | — |
Advisories 1
- ICSA-23-199-02 Keysight N6845A Geolocation Server CISA ICS & IT advisories · Jul 18, 2023