PT-2026-2426 · Mediconta · Mediconta

Luis Martinez · Publicado 2026-01-13 · Atualizado 2026-01-14 · CVE-2023-54336

Positive Technologies (AI Summary)

CVSS v3.1

8.4

Alta

Vetor base

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Mediconta version 3.7.27

Description Mediconta version 3.7.27 contains an unquoted service path vulnerability within the servermedicontservice. This allows local users to potentially execute code with elevated privileges. The vulnerability exists due to an unquoted path in C:Program Files (x86)medicont3. An attacker can exploit this by injecting malicious code that executes with LocalSystem permissions during service startup.

Recommendations Ensure the service path is properly quoted to prevent malicious code execution.

Exploit

Correção

Enumeração de Fraquezas

CWE-428

Identificadores relacionados

CVE-2023-54336

Produtos afetados

Mediconta

Referências · 5

• 🔥 https://exploit-db.com/exploits/51064 · Exploit
• https://infonetsoftware.com · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-54336 · Nota de Segurança
• https://twitter.com/CVEnew/status/2011383040270799037 · Publicação no Twitter
• https://vulncheck.com/advisories/mediconta-servermedicontservice-unquoted-service-path · Nota