PTC Creo Elements/Direct License Server exposes a web interface which can be used by unauthenticated remote attackers to execute arbitrary OS commands on the server.
https://www.securityweek.com/critical-flaw-in-ptc-license-server-can-allow-lateral-movement-in-industrial-organizations/
https://www.cisa.gov/news-events/ics-advisories/icsa-24-177-02
https://www.ptc.com/en/support/article/CS417607
Source: Mitre, NVD
Published: 2024-06-27
Updated: 2024-06-28
Base Score: 10
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
Severity: Critical
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H