CVE-2023-53947 — OCS Inventory NG 2.3.0.0 Unquoted Service Path Privilege Escalation
OCS Inventory NG 2.3.0.0 contains an unquoted service path vulnerability that allows local attackers to escalate privileges to system level. Attackers can place a malicious exec…
Published: 2025-12-19 · CVSS: 8.5 · CVSS 4.0
OCS Inventory NG 2.3.0.0 contains an unquoted service path vulnerability that allows local attackers to escalate privileges to system level. Attackers can place a malicious executable in the unquoted service path and trigger the service restart to execute code with elevated system privileges.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7