Security Advisory

CVE-2023-53947

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-12-19 21:05:49
Last updated 2026-05-14 02:07:03
Assigner VulnCheck
State PUBLISHED

Description

OCS Inventory NG 2.3.0.0 contains an unquoted service path vulnerability that allows local attackers to escalate privileges to system level. Attackers can place a malicious executable in the unquoted service path and trigger the service restart to execute code with elevated system privileges.