CVE-2023-2270

CVE-2023-2270 is a local privilege escalation vulnerability affecting Netskope client versions prior to R100 on Microsoft Windows. The Netskope client service, running with NT\SYSTEM privileges, improperly handles relative paths when downloading and unzipping configuration files from localhost. This allows a low-privileged local user to write arbitrary files to privileged locations. The vulnerability has a CVSS score of 7.8 (High), indicating a significant risk. An attacker with local access can exploit this flaw to execute code with NT\SYSTEM privileges, leading to full compromise of the affected system. The attack complexity is low, and no user interaction is required. Currently, there is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. The vulnerability has received minimal community discussion or media coverage, suggesting a low profile at this time.