← back
CVE-2023-29152mediumCWE-285

PTC Vuforia Studio Improper Authorization

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.2epss 0.4%
exploitation probability
0.4%top 63% of all CVEs
observed exploitation
nono source reports it
By changing the filename parameter in the request, an attacker could delete any file with the permissions of the Vuforia server account.
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:N/A:H
Affected products
PTC · Vuforia Studio