CVE-2023-54336
Published: 13 January 2026
Summary
CVE-2023-54336 is a high-severity Unquoted Search Path or Element (CWE-428) vulnerability in Infonetsoftware (inferred from references). Its CVSS base score is 8.5 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Path Interception by Unquoted Path (T1574.009); ranked at the 5.4th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 CM-6 (Configuration Settings) and RA-5 (Vulnerability Monitoring and Scanning).
Deeper analysis
CVE-2023-54336 is an unquoted service path vulnerability in Mediconta 3.7.27, specifically affecting the servermedicontservice component. The issue arises from an unquoted path configured as C:\Program Files (x86)\medicont3\, which enables local users to potentially execute arbitrary code with elevated privileges. This flaw is classified under CWE-428 and carries a CVSS v3.1 base score of 8.4 (AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Local attackers with access to the affected system can exploit this vulnerability without requiring privileges (PR:N). By placing malicious executables in directories that precede the legitimate service binary in the system's path search order, they can hijack the service startup process. Successful exploitation results in code execution with LocalSystem permissions, enabling high-impact compromise of confidentiality, integrity, and availability.
Advisories and related resources provide further details on the issue, including a proof-of-concept exploit at https://www.exploit-db.com/exploits/51064, the vendor site at https://www.infonetsoftware.com, and a VulnCheck advisory at https://www.vulncheck.com/advisories/mediconta-servermedicontservice-unquoted-service-path.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2026-2587
Vulnerability details
Mediconta 3.7.27 contains an unquoted service path vulnerability in the servermedicontservice that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files (x86)\medicont3\ to inject malicious code that would execute with…
more
LocalSystem permissions during service startup.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Unquoted service path directly enables path interception by unquoted path (T1574.009) for local privilege escalation to SYSTEM.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Enforces secure configuration settings for services, including proper quoting of executable paths to directly prevent unquoted service path hijacking.
Requires identification, reporting, and correction of flaws like the unquoted service path in Mediconta's servermedicontservice to eliminate privilege escalation risk.
Vulnerability scanning detects unquoted service path vulnerabilities such as CVE-2023-54336 for timely remediation.