CVE-2023-7016
HIGHThales SafeNet Authentication Client < 10.8 R10 - Privilege Escalation to SYSTEM via Local Access
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2023-7016. PoCs published by ewilded.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2023-7016, targeting a race condition in Thales SafeNet Authentication Client's msiexec repair mode to achieve local privilege escalation (LPE). The exploit dynamically identifies and overwrites a temporary executable file (wacXXXX.tmp) with a malicious payload (raw.exe) during the installation process.
Description
A flaw in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to execute code at a SYSTEM level via local access.
Exploits (1)
This repository contains a functional exploit for CVE-2023-7016, targeting a race condition in Thales SafeNet Authentication Client's msiexec repair mode to achieve local privilege escalation (LPE). The exploit dynamically identifies and overwrites a temporary executable file (wacXXXX.tmp) with a malicious payload (raw.exe) during the installation process.
References (1)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H