Lucene search

42GearsCVELIST:CVE-2023-2335

HistoryApr 27, 2023 - 5:55 p.m.

CVE-2023-2335 Plaintext Password in Registry

2023-04-2717:55:49

CWE-314

CWE-312

42Gears

www.cve.org

vulnerability

42gears surelock

windows

setup

admin user credentials

plaintext password

registry

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

43.1%

JSON

Plaintext Password in Registry

vulnerability in 42gears surelock windows surelockwinsetupv2.40.0.Exe on Windows (Registery modules) allows Retrieve

Admin user credentials

This issue affects surelock windows: from 2.3.12 through 2.40.0.

CNA Affected

[
  {
    "collectionURL": "https://mars.42gears.com/support/inout/surelockwinsetupv2.40.0.exe",
    "defaultStatus": "unaffected",
    "modules": [
      "Registery"
    ],
    "packageName": "surelockwinsetupv2.40.0.exe",
    "platforms": [
      "Windows"
    ],
    "product": "surelock windows",
    "vendor": "42gears",
    "versions": [
      {
        "lessThanOrEqual": "2.40.0",
        "status": "affected",
        "version": "2.3.12",
        "versionType": "Patch"
      }
    ]
  }
]

References

www.42gears.com/security-and-compliance/

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

43.1%

JSON

Related for CVELIST:CVE-2023-2335