CVE-2023-53947

Publication date

2025-12-19 21:05:49

Family

VulnCheck

State

PUBLISHED

Description

OCS Inventory NG 2.3.0.0 contains an unquoted service path vulnerability that allows local attackers to escalate privileges to system level. Attackers can place a malicious executable in the unquoted service path and trigger the service restart to execute code with elevated system privileges.