CVE-2023-36853 Information

Description

?In Keysight Geolocation Server v2.4.2 and prior a low privileged attacker could create a local ZIP file containing a malicious script in any location. The attacker could abuse this to load a DLL with SYSTEM privileges.

Reference

https://www.cisa.gov/news-events/ics-advisories/icsa-23-199-02

Share on: