CVE-2023-53947

Impact

OCS Inventory NG 2.3.0.0 contains an unquoted service path vulnerability that allows local attackers to escalate privileges to system level. Attackers can place a malicious executable in the unquoted service path and trigger the service restart to execute code with elevated system privileges.

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

Weakness classification

References

• NVD record
• CVE.org record
• https://github.com/OCSInventory-NG/WindowsAgent
• https://www.exploit-db.com/exploits/51389
• https://www.vulncheck.com/advisories/ocs-inventory-ng-unquoted-service-path-privilege-escalation