Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Keysight Component: Geolocation Server Clear all filters
TI-2023-18645 CVE-2023-36853 · GHSA-7v9x-7r25-h768

Keysight Geolocation Server Exposed Dangerous Method or Function

Priority LOW 35

​In Keysight Geolocation Server v2.4.2 and prior, a low privileged attacker could create a local ZIP file containing a malicious script in any location.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00205 Published 2023-07-19 No fix listed CWE-749
TI-2023-17223 CVE-2023-34394 · GHSA-38fr-qxq2-m645

Keysight N6845A Relative Path Traversal

Priority LOW 36

In Keysight Geolocation Server v2.4.2 and prior, an attacker could upload a specially crafted malicious file or delete any file or directory with SYSTEM privileges due to an improper path validation, which could result i…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00245 Published 2023-07-19 No fix listed CWE-23