Lucene search

K
nvd[email protected]NVD:CVE-2023-2335
HistoryApr 27, 2023 - 6:15 p.m.

CVE-2023-2335

2023-04-2718:15:13
CWE-314
CWE-522
CWE-312
web.nvd.nist.gov
7
cve-2023-2335
surelock
windows
vulnerability
plaintext password
registry
admin user credentials

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

43.0%

Plaintext Password in Registry

vulnerability in 42gears surelock windows surelockwinsetupv2.40.0.Exe on Windows (Registery modules) allows Retrieve

Admin user credentials

This issue affects surelock windows: from 2.3.12 through 2.40.0.

Affected configurations

Nvd
Node
42gearssurelockRange2.3.122.40.0windows
VendorProductVersionCPE
42gearssurelock*cpe:2.3:a:42gears:surelock:*:*:*:*:*:windows:*:*

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

43.0%

Related for NVD:CVE-2023-2335