Skip to content
OpenAdvisories
High · 7.8 Public exploit CVE-2023-7016 EUVD-2023-59208GHSA-5v43-2gf4-x7p5

Privilege Escalation in SafeNet Authentication Client

Published Feb 27, 2024 · Updated Aug 15, 2024 · Assigned by THA-PSIRT

Description

A flaw in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to execute code at a SYSTEM level via local access.

Affected products

VendorProductAffectedFixed
Thales SafeNet Authentication Client < 10.8 10.8

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

  • ewilded/CVE-2023-7016-POC ★ 1 · Feb 27, 2024

    POC for the flaw in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows that allows an attacker to execute code at a SYSTEM level via local access.

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

References