CVE-2023-36853 HIGH

CVE-2023-36853: Keysight Geolocation Server Exposed Dangerous Method or Function

Vendor Keysight Technologies
Product N6845A Geolocation Server
Weakness CWE-749
Published July 19, 2023
Last update October 24, 2024
View on NVD All CVEs

CVSS base score

7.8/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

​In Keysight Geolocation Server v2.4.2 and prior, a low privileged attacker could create a local ZIP file containing a malicious script in any location. The attacker could abuse this to load a DLL with SYSTEM privileges.

Key dates

02Disclosure timeline

July 19, 2023 CVE published
October 24, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2023-40501 LG Simple Editor copyContent Exposed Dangerous Function Remote Code Execution Vulnerability CVE-2020-3416 Cisco IOS XE Software for Cisco ASR 900 Series Route Switch Processor 3 Arbitrary Code Execution Vulnerabilities CVE-2023-42494 EisBaer Scada - CWE-749: Exposed Dangerous Method or Function CVE-2023-51583 Voltronic Power ViewPower UpsScheduler Exposed Dangerous Method Remote Code Execution Vulnerability CVE-2026-35488 Tandoor Recipes — CustomIsShared permits DELETE/PUT on RecipeBook by shared (read-only) users