Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2023-34394

Keysight N6845A Relative Path Traversal

Description

In Keysight Geolocation Server v2.4.2 and prior, an attacker could upload a specially crafted malicious file or delete any file or directory with SYSTEM privileges due to an improper path validation, which could result in local privilege escalation or a denial-of-service condition.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Keysight Technologies N6845A Geolocation Server

Default version status: unaffected

  • 0 to ≤ 2.4.2affected

References