42gears

8 CVEs across 4 42gears products. Browse 42gears vulnerabilities, severities, and proof-of-concept exploits.

42gears products with known CVEs

ProductCVEs
Suremdm6
Surelock2
Surelock Windows1
Surelock Windows1
42gears CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2023-3897Medium4.82023-07-25Username enumeration is possible through Bypassing CAPTCHA in On-premise SureMDM Solution on Windows deployment allows attacker to enumerate local user informa…
CVE-2023-2335Medium6.52023-04-27 Plaintext Password in Registry vulnerability in 42gears surelock windows surelockwinsetupv2.40.0.Exe on Windows (Registery modules) allows Retrieve Admin…
CVE-2023-2331High7.82023-04-27Unquoted service Path or Element vulnerability in 42Gears Surelock Windows SureLock Service (NixService.Exe) on Windows application will allows to insert arbit…
CVE-2018-15659Medium6.52019-02-05An issue was discovered in 42Gears SureMDM before 2018-11-27, related to the access policy for Silverlight applications. Cross-origin access is possible.
CVE-2018-15658High7.52019-02-05An issue was discovered in 42Gears SureMDM before 2018-11-27. By visiting the page found at /console/ConsolePage/Master.html, an attacker is able to see the ma…
CVE-2018-15657High7.32019-02-05An SSRF issue was discovered in 42Gears SureMDM before 2018-11-27 via the /api/DownloadUrlResponse.ashx "url" parameter.
CVE-2018-15656High7.52019-02-05An issue was discovered in the registration API endpoint in 42Gears SureMDM before 2018-11-27. An attacker can submit a GET request to /api/register/:email, wh…
CVE-2018-15655Medium6.52019-02-05An issue was discovered in 42Gears SureMDM before 2018-11-27, related to CORS settings. Cross-origin access is possible.