CVE-2023-27133

CRITICAL 9.8CVE-2023-27133 · Published 17/10/2023 · updated 17/06/2026

In short

CVE-2023-27133 is a CRITICAL (CVSS 9.8) vulnerability affecting tsplus remote work (tsplus).
Chance of exploitation in the next 30 days (EPSS): 0.93%, higher than 60.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
tsplus remote work tsplus	`≤ 16.0.0.0`	No fix yet

Description

TSplus Remote Work 16.0.0.0 has weak permissions for .exe, .js, and .html files under the %PROGRAMFILES(X86)%\TSplus-RemoteWork\Clients\www folder. This may enable privilege escalation if a different local user modifies a file. NOTE: CVE-2023-31067 and CVE-2023-31068 are only about the TSplus Remote Access product, not the TSplus Remote Work product.

References

packetstormsecurity.com/files/174272 · Exploit

More vulnerabilities in tsplus remote work

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free