CVE-2023-29444 Information

Description

An uncontrolled search path element vulnerability (DLL hijacking) has been discovered that could allow a locally authenticated adversary to escalate privileges to SYSTEM. Alternatively they could host a trojanized version of the software and trick victims into downloading and installing their malicious version to gain initial access and code execution.

Reference

https://www.cisa.gov/news-events/ics-advisories/icsa-23-243-03 https://www.ptc.com/en/support/article/cs399528