CVE-2023-4991
NextBX QWAlerter QWAlerter.exe unquoted search path
- State
- Published
- Severity
- 7.8 High
- Published
- Sep 15, 2023
- Updated
- Sep 25, 2024
- Reserved
- Sep 15, 2023
Description
A vulnerability was found in NextBX QWAlerter 4.50. It has been rated as critical. Affected by this issue is some unknown functionality of the file QWAlerter.exe. The manipulation leads to unquoted search path. It is possible to launch the attack on the local host. The identifier of this vulnerability is VDB-239804. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.8 High | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | VulDB |
| 3.0 | 7.8 High | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | VulDB |
| 2.0 | 6.8 Medium | AV:L/AC:L/Au:S/C:C/I:C/A:C | VulDB |
Weaknesses
- CWE-428 Unquoted Search Path
Affected Products
| Product | Versions |
|---|---|
QWAlerterNextBX |
|
References
- https://vuldb.com/?id.239804vdb-entrytechnical-description
- https://vuldb.com/?ctiid.239804signature
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.