Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

8 records

Vendor: 42Gears Clear all filters
TI-2023-03642 CVE-2023-3897 · GHSA-mvf6-w562-53x9

Bypassing CAPTCHA & Enumerating Usernames via Password Reset Page

Priority LOW 30

Username enumeration is possible through Bypassing CAPTCHA in On-premise SureMDM Solution on Windows deployment allows attacker to enumerate local user information via error message.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.03064 Published 2023-07-25 No fix listed CWE-203
TI-2023-02191 CVE-2023-2335 · GHSA-qjfv-wmrg-m3hx

Cleartext storage of sensitive information in 42Gears surelock windows

Priority LOW 33

Plaintext Password in Registry vulnerability in 42gears surelock windows surelockwinsetupv2.40.0.Exe on Windows (Registery modules) allows Retrieve Admin user credentials This issue affects surelock windows: from 2.3.12…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00308 Published 2023-04-27 No fix listed CWE-312
TI-2023-02187 CVE-2023-2331 · GHSA-hjqc-mphx-j8hv

Bypassing hardening via Unquoted Service path vulnerability

Priority LOW 35

Unquoted service Path or Element vulnerability in 42Gears Surelock Windows SureLock Service (NixService.Exe) on Windows application will allows to insert arbitrary code into the service.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00189 Published 2023-04-27 No fix listed CWE-428