CVE-2023-1516

EUVD-2023-23762
RoboDK versions 5.5.3 and prior contain an insecure permission 
assignment to critical directories vulnerability, which could allow a 
local user to escalate privileges and write files to the RoboDK process 
and achieve code execution.  
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.9 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
icscertCNA
7.9 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 13%
Affected Products (NVD)
VendorProductVersion
robodkrobodk
𝑥
≤ 5.5.3
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://robodk.com/contact
https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-01
https://robodk.com/contact
https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-01