An uncontrolled search path element vulnerability (DLL hijacking) has been discovered that could allow a locally authenticated adversary to escalate privileges to SYSTEM.
The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.
| Link | Tags |
|---|---|
| https://www.cisa.gov/news-events/ics-advisories/icsa-23-243-03 | government resource third party advisory us government resource |
| https://www.ptc.com/en/support/article/cs399528 | vendor advisory |
| https://www.dragos.com/advisory/ptcs-kepserverex-vulnerabilities/ | third party advisory |