CVE-2023-2331

CVE-2023-2331 relates to an Unquoted service Path/Element vulnerability in the 42Gears Surelock Windows SureLock Service (NixService.Exe). Affected versions are 2.3.12 through 2.40.0. The underlying issue is an unquoted service path, enabling local arbitrary code insertion into the service. CVSSv...

CVE-2023-2335

CVE-2023-2335 concerns 42Gears Surelock for Windows: plaintext passwords stored in the registry within the surelockwinsetupv2.40.0.Exe registry modules, allowing retrieval of administrator credentials. Affected versions are Surelock Windows 2.3.12–2.40.0. Reported impact is confidentiality risk (...