PT-2026-2426 · Mediconta · Mediconta

Luis Martinez · Published 2026-01-13 · Updated 2026-01-14 · CVE-2023-54336

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Mediconta version 3.7.27

Description Mediconta version 3.7.27 contains an unquoted service path vulnerability within the servermedicontservice. This allows local users to potentially execute code with elevated privileges. The vulnerability exists due to an unquoted path in C:Program Files (x86)medicont3. An attacker can exploit this by injecting malicious code that executes with LocalSystem permissions during service startup.

Recommendations Ensure the service path is properly quoted to prevent malicious code execution.

Exploit

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2023-54336

Affected Products

Mediconta

References · 5

• 🔥 https://exploit-db.com/exploits/51064 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-54336 · Security Note
• https://infonetsoftware.com · Note
• https://twitter.com/CVEnew/status/2011383040270799037 · Twitter Post
• https://vulncheck.com/advisories/mediconta-servermedicontservice-unquoted-service-path · Note