What is CVE-2023-2331?

CVE-2023-2331 is a high-severity vulnerability in 42gears Surelock, classified under Unquoted Search Path or Element. CVSS score: 7.8/10. Published 2023-04-27.

How severe is CVE-2023-2331?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in 42gears Surelock

CVE-2023-2331

Unquoted service Path or Element vulnerability in 42Gears Surelock Windows SureLock Service (NixService.Exe) on Windows application will allows to insert arbitrary code into the service. This issue affects Surelock Windows : from 2.3.12 through 2.40.0.

EPSS: 0.002 (8.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

42gears Surelock
42gears Surelock Windows — versions 2.3.12

Weakness classification (CWE)

CWE-428 — Unquoted Search Path or Element

References

security@42gears.com (vendor-advisory, Not Applicable)
nvd@nist.gov (Vendor Advisory)

Frequently asked questions

What is CVE-2023-2331?: CVE-2023-2331 is a high-severity vulnerability in 42gears Surelock, classified under Unquoted Search Path or Element. CVSS score: 7.8/10. Published 2023-04-27.
How severe is CVE-2023-2331?: High severity. CVSS v3 base score is 7.8 out of 10.