Approved changes feed: RSS · Atom

cpe:2.3:a:keysight:geolocation_server:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorKeysight (874b7097-5e29-5e4f-b5af-f7aeb0f6109c)
ProductGeolocation Server (daa1ce65-2ebf-578d-a1c7-c81b29c46ff8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-36853 vulnerable 2026-06-03 14:52:28.076167 Keysight Geolocation Server Exposed Dangerous Method or Function
HIGH (7.8)
​In Keysight Geolocation Server v2.4.2 and prior, a low privileged attacker could create a local ZIP file containing a malicious script in any location. The attacker could abuse this to load a DLL with SYSTEM privileges.
Published: 2023-07-19T21:57:57.236Z
Updated: 2024-10-24T20:35:22.076Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34394 vulnerable 2026-06-03 14:52:16.633752 Keysight N6845A Relative Path Traversal
HIGH (7.8)
In Keysight Geolocation Server v2.4.2 and prior, an attacker could upload a specially crafted malicious file or delete any file or directory with SYSTEM privileges due to an improper path validation, which could result in local privilege escalation or a denial-of-service condition.
Published: 2023-07-19T21:55:31.934Z
Updated: 2024-10-28T14:19:36.758Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.