In Keysight Geolocation Server v2.4.2 and prior, an attacker could upload a specially crafted malicious file or delete any file or directory with SYSTEM privileges due to an improper path validation, which could result in local privilege escalation or a denial-of-service condition.
Solution:
The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory.
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
| Link | Tags |
|---|---|
| https://www.cisa.gov/news-events/ics-advisories/icsa-23-199-02 | third party advisory us government resource |