Description
PTC Creo Elements/Direct License Server exposes a web interface which can be used by unauthenticated remote attackers to execute arbitrary OS commands on the server.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| PTC | Creo Elements/Direct License | ≤ 20.7.0.0 | — |
Advisories 1
- ICSA-24-177-02 PTC Creo Elements/Direct License Server (Update A) CISA ICS & IT advisories · Jul 2, 2024