CVE-2023-2331

Name of the Vulnerable Software and Affected Versions 42Gears Surelock Windows versions 2.3.12 through 2.40.0

Description The issue is related to an Unquoted service Path or Element vulnerability in the SureLock Service (NixService.Exe) on Windows application, which allows arbitrary code insertion into the service.

Recommendations For versions 2.3.12 through 2.40.0, update to a version that includes the fix for this issue to prevent arbitrary code insertion into the service. At the moment, there is no information about a newer version that contains a fix for this vulnerability.