Lucene search

K
nvd[email protected]NVD:CVE-2023-2335
HistoryApr 27, 2023 - 6:15 p.m.

CVE-2023-2335

2023-04-2718:15:13
CWE-314
CWE-312
CWE-522
web.nvd.nist.gov
cve-2023-2335
surelock
windows
vulnerability
plaintext password
registry
admin user credentials

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.1%

Plaintext Password in Registry

vulnerability in 42gears surelock windows surelockwinsetupv2.40.0.Exe on Windows (Registery modules) allows Retrieve

Admin user credentials

This issue affects surelock windows: from 2.3.12 through 2.40.0.

Affected configurations

NVD
Node
42gearssurelockRange2.3.122.40.0windows

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.1%

Related for NVD:CVE-2023-2335