Skip to content
OpenAdvisories
High · 7.8 CVE-2023-2331 EUVD-2023-33831GHSA-hjqc-mphx-j8hv

Bypassing hardening via Unquoted Service path vulnerability

Published Apr 27, 2023 · Updated Jan 30, 2025 · Assigned by 42Gears

Description

Unquoted service Path or Element vulnerability in 42Gears Surelock Windows SureLock Service (NixService.Exe) on Windows application will allows to insert arbitrary code into the service.
This issue affects Surelock Windows : from 2.3.12 through 2.40.0.

Affected products

VendorProductAffectedFixed
42Gears Surelock Windows 2.3.12 – ≤ 2.40.0 —

References