1. Home
  2. CVE Database
  3. CVE-2023-2335
MEDIUM · 6.5

CVE-2023-2335

Plaintext Password in Registry vulnerability in 42gears surelock windows surelockwinsetupv2.40.0.Exe on Windows (Registery modules) allows Retrieve Admin user credentials This issue affects sure...

Vulnerability Description

Plaintext Password in Registry vulnerability in 42gears surelock windows surelockwinsetupv2.40.0.Exe on Windows (Registery modules) allows Retrieve Admin user credentials This issue affects surelock windows: from 2.3.12 through 2.40.0.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
42GearsSurelock>= 2.3.12, <= 2.40.0

Related Weaknesses (CWE)

CWE-314CWE-522CWE-312

References

FAQ

What is CVE-2023-2335?

CVE-2023-2335 is a vulnerability with a CVSS score of 6.5 (MEDIUM). Plaintext Password in Registry vulnerability in 42gears surelock windows surelockwinsetupv2.40.0.Exe on Windows (Registery modules) allows Retrieve Admin user credentials This issue affects sure...

How severe is CVE-2023-2335?

CVE-2023-2335 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-2335?

Check the references section above for vendor advisories and patch information. Affected products include: 42Gears Surelock.