Cyber Resilience

CVE-2023-54336

HighPublic PoC

Published: 13 January 2026

Published
13 January 2026
Modified
15 April 2026
KEV Added
Patch
CVSS Score v4 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
EPSS Score 0.0016 5.4th percentile
Risk Priority 55 floored blend · peak EPSS

Summary

CVE-2023-54336 is a high-severity Unquoted Search Path or Element (CWE-428) vulnerability in Infonetsoftware (inferred from references). Its CVSS base score is 8.5 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Path Interception by Unquoted Path (T1574.009); ranked at the 5.4th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

The strongest mitigations our analysis identified are NIST 800-53 CM-6 (Configuration Settings) and RA-5 (Vulnerability Monitoring and Scanning).

Deeper analysis

CVE-2023-54336 is an unquoted service path vulnerability in Mediconta 3.7.27, specifically affecting the servermedicontservice component. The issue arises from an unquoted path configured as C:\Program Files (x86)\medicont3\, which enables local users to potentially execute arbitrary code with elevated privileges. This flaw is classified under CWE-428 and carries a CVSS v3.1 base score of 8.4 (AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Local attackers with access to the affected system can exploit this vulnerability without requiring privileges (PR:N). By placing malicious executables in directories that precede the legitimate service binary in the system's path search order, they can hijack the service startup process. Successful exploitation results in code execution with LocalSystem permissions, enabling high-impact compromise of confidentiality, integrity, and availability.

Advisories and related resources provide further details on the issue, including a proof-of-concept exploit at https://www.exploit-db.com/exploits/51064, the vendor site at https://www.infonetsoftware.com, and a VulnCheck advisory at https://www.vulncheck.com/advisories/mediconta-servermedicontservice-unquoted-service-path.

EU & UK References

Vulnerability details

Mediconta 3.7.27 contains an unquoted service path vulnerability in the servermedicontservice that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files (x86)\medicont3\ to inject malicious code that would execute with…

more

LocalSystem permissions during service startup.

CWE(s)

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1574.009 Path Interception by Unquoted Path Stealth
Adversaries may execute their own malicious payloads by hijacking vulnerable file path references.
Why these techniques?

Unquoted service path directly enables path interception by unquoted path (T1574.009) for local privilege escalation to SYSTEM.

Confidence: HIGH · MITRE ATT&CK Enterprise v19.0

CVEs Like This One

CVE-2020-36928Shared CWE-428
CVE-2020-37048Shared CWE-428
CVE-2019-25306Shared CWE-428
CVE-2020-36979Shared CWE-428
CVE-2020-36929Shared CWE-428
CVE-2020-37017Shared CWE-428
CVE-2021-47859Shared CWE-428
CVE-2019-25309Shared CWE-428
CVE-2021-47790Shared CWE-428
CVE-2022-50929Shared CWE-428

Affected Assets

Infonetsoftware
inferred from references and description; NVD did not file a CPE for this CVE

Mitigating Controls

Mitigating Controls (NIST 800-53 r5) AI

prevent

Enforces secure configuration settings for services, including proper quoting of executable paths to directly prevent unquoted service path hijacking.

prevent

Requires identification, reporting, and correction of flaws like the unquoted service path in Mediconta's servermedicontservice to eliminate privilege escalation risk.

detect

Vulnerability scanning detects unquoted service path vulnerabilities such as CVE-2023-54336 for timely remediation.

References