PTC Releases Patch for Critical Flaw in Creo Elements/Direct License Server
The vulnerability, tracked as CVE-2024-6071, affects version 20.7.0.0 and earlier, and allows unauthenticated remote attackers to execute arbitrary OS commands on the server through a web interface.