« Volver al listado

CVE-2023-5993

Estado: AnalizadaAlta (7.8)—

A flaw in the Windows Installer in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to escalate their privilege level via local access.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Thalesgroup — Safenet Authentication Client

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2023-5993",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2023-5993",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-02-27T15:39:53.382676Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "psirt@thalesgroup.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.8,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.8
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.8,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@thalesgroup.com",
      "affectedData": [
        {
          "vendor": "Thales",
          "product": "SafeNet Authentication Client",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.8",
              "versionType": "patch 10"
            }
          ],
          "platforms": [
            "Windows"
          ],
          "defaultStatus": "unaffected"
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:thalesgroup:safenet_authentication_client:*:*:*:*:*:*:*:*"
          ],
          "vendor": "thalesgroup",
          "product": "safenet_authentication_client",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.8",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2024-02-27T11:15:07.343",
  "references": [
    {
      "url": "https://supportportal.thalesgroup.com",
      "tags": [
        "Product"
      ],
      "source": "psirt@thalesgroup.com"
    },
    {
      "url": "https://supportportal.thalesgroup.com",
      "tags": [
        "Product"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "psirt@thalesgroup.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-269"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A flaw in the Windows Installer in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to escalate their privilege level via local access."
    },
    {
      "lang": "es",
      "value": "Una falla en el instalador de Windows en Thales SafeNet Authentication Client anterior a 10.8 R10 en Windows permite a un atacante escalar su nivel de privilegios a través del acceso local."
    }
  ],
  "lastModified": "2026-06-17T06:49:49.067",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:thalesgroup:safenet_authentication_client:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C1A4278F-3A51-4996-BA41-63EAFDC94679",
              "versionEndExcluding": "10.8"
            },
            {
              "criteria": "cpe:2.3:a:thalesgroup:safenet_authentication_client:10.8:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D1CFFB1B-9F22-48FE-86C1-72C09C57A95C"
            },
            {
              "criteria": "cpe:2.3:a:thalesgroup:safenet_authentication_client:10.8:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4FB4DA9F-D19B-41E9-BB88-7C24E48ADEE2"
            },
            {
              "criteria": "cpe:2.3:a:thalesgroup:safenet_authentication_client:10.8:r5:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8D9E5B18-464C-4BD8-9A13-00AA985350DE"
            },
            {
              "criteria": "cpe:2.3:a:thalesgroup:safenet_authentication_client:10.8:r6:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "70665411-4646-48D3-A25B-423233D85D54"
            },
            {
              "criteria": "cpe:2.3:a:thalesgroup:safenet_authentication_client:10.8:r8:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1B5FD010-0AE2-4FDC-84C6-24EBE5C79932"
            },
            {
              "criteria": "cpe:2.3:a:thalesgroup:safenet_authentication_client:10.8:r9:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "79DCB763-95ED-4D17-956E-DC4ED5D7212D"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "psirt@thalesgroup.com"
}