CVE-2023-29444 (published 2024-01-10T17:06:35.965Z)
An uncontrolled search path element vulnerability (DLL hijacking) has been discovered that could allow a locally authenticated adversary to escalate privileges to SYSTEM. Alternatively, they could host a trojanized version of the software and trick victims into downloading and installing their malicious version to gain initial access and code execution.
Affected products: Vendor: PTC
Product: Kepware KEPServerEX
Versions: 0