CVE-2023-2331
Bypassing hardening via Unquoted Service path vulnerability
- State
- Published
- Severity
- 7.8 High
- Published
- Apr 27, 2023
- Updated
- Jan 30, 2025
- Reserved
- Apr 27, 2023
Description
Unquoted service Path or Element vulnerability in 42Gears Surelock Windows SureLock Service (NixService.Exe) on Windows application will allows to insert arbitrary code into the service. This issue affects Surelock Windows : from 2.3.12 through 2.40.0.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.8 High | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | 42Gears |
Weaknesses
- CWE-428 Unquoted Search Path or Element
Affected Products
| Product | Versions |
|---|---|
Surelock Windows42Gears |
|
References
- https://www.42gears.com/security-and-compliancevendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.