10.0
Critical
CVE-2024-6071 PTC Creo Elements/Direct License Server exposes a web interface which can be used by unauthenticated remote attackers to…
Description
PTC Creo Elements/Direct License Server exposes a web interface which can be used by unauthenticated remote attackers to execute arbitrary OS commands on the server.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Creo Elements/Direct License 20.7 | earliest → 20.7.0.0 | No fix stated |
| creo_elements\/direct_license 20.7 | earliest → 20.7.0.0 | No fix stated |