Lucene search
PRIOn knowledge basePRION:CVE-2023-28399HistoryJun 01, 2023 - 2:15 a.m.
Code injection
2023-06-0102:15:00
PRIOn knowledge base
www.prio-n.com
3
code injection
permission assignment
vulnerability
conprosys hmi system
acl
access control list
privileges
user
pc
malicious program
Incorrect permission assignment for critical resource exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. ACL (Access Control List) is not appropriately set to the local folder where the affected product is installed, therefore a wide range of privileges is permitted to a user of the PC where the affected product is installed. As a result, the user may be able to destroy the system and/or execute a malicious program.
| CPE | Name | Operator | Version |
|---|---|---|---|
| conprosys_hmi_system | lt | 3.5.3 |
Related
cve
cve
CVE-2023-28399
2023-06-01 02:15:09
nvd
nvd
CVE-2023-28399
2023-06-01 02:15:09
cvelist
cvelist
CVE-2023-28399
2023-06-01 00:00:00