CVE-2023-2331CWE-428

Bypassing hardening via Unquoted Service path vulnerability

High · published April 27, 2023

CVSS v3.1
7.8
EPSS
0%
Percentile
8.1
In the wild
Unconfirmed
What it is

Unquoted service Path or Element vulnerability in 42Gears Surelock Windows SureLock Service (NixService.Exe) on Windows application will allows to insert arbitrary code into the service.

This issue affects Surelock Windows : from 2.3.12 through 2.40.0.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00189 · 8.1th percentile
Weakness
CWE-428 · Unquoted Search Path or Element
Published
2023-04-27T11:51Z
EPSS history
Timeline
  • 27 APR 11:51Z
    Bypassing hardening via Unquoted Service path vulnerability
    cvelistv5