Lucene search

42GearsCVELIST:CVE-2023-2335

HistoryApr 27, 2023 - 5:55 p.m.

CVE-2023-2335 Plaintext Password in Registry

2023-04-2717:55:49

CWE-314

CWE-312

42Gears

www.cve.org

vulnerability

42gears surelock

windows

setup

admin user credentials

plaintext password

registry

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

43.0%

JSON

Plaintext Password in Registry

vulnerability in 42gears surelock windows surelockwinsetupv2.40.0.Exe on Windows (Registery modules) allows Retrieve

Admin user credentials

This issue affects surelock windows: from 2.3.12 through 2.40.0.

CNA Affected

[
  {
    "collectionURL": "https://mars.42gears.com/support/inout/surelockwinsetupv2.40.0.exe",
    "defaultStatus": "unaffected",
    "modules": [
      "Registery"
    ],
    "packageName": "surelockwinsetupv2.40.0.exe",
    "platforms": [
      "Windows"
    ],
    "product": "surelock windows",
    "vendor": "42gears",
    "versions": [
      {
        "lessThanOrEqual": "2.40.0",
        "status": "affected",
        "version": "2.3.12",
        "versionType": "Patch"
      }
    ]
  }
]

References

www.42gears.com/security-and-compliance/

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

43.0%

JSON

Related for CVELIST:CVE-2023-2335