CVE-2023-2331

HIGH 7.8CVE-2023-2331 · Published 27/04/2023 · updated 17/06/2026

In short

CVE-2023-2331 is a HIGH (CVSS 7.8) vulnerability affecting surelock (42gears).
Chance of exploitation in the next 30 days (EPSS): 0.19%, higher than 8.6% of all vulnerabilities.
Fix: update to 2.41.0 or later.

Package	Affected versions	Patched versions
surelock 42gears	`≥ 2.3.12, < 2.41.0`	`2.41.0`

Description

Unquoted service Path or Element vulnerability in 42Gears Surelock Windows SureLock Service (NixService.Exe) on Windows application will allows to insert arbitrary code into the service. This issue affects Surelock Windows : from 2.3.12 through 2.40.0.

References

42gears.com/security-and-compliance · Not Applicable
42gears.com/security-and-compliance/42g-2023-001 · Vendor Advisory

More vulnerabilities in surelock

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free