CVE-2024-0197-POC

CVE-2024-0197-POC Proof of concept for Local Privilege Escalation in Thales Sentinel HASP LDK. I initially wanted to develop one, but eventually that turned out to be unnecessary. There is no race condition to win, and a simple DLL search order hijacking from a known location suffices to attain...

Design/Logic Flaw

A flaw in the installer for Thales SafeNet Sentinel HASP LDK prior to 9.16 on Windows allows an attacker to escalate their privilege level via local access...

CVE-2024-0197

CVE-2024-0197 affects the Windows installer of Thales SafeNet Sentinel HASP LDK, prior to version 9.16. The root cause is an installer flaw that enables local privilege escalation when an attacker already has local access. The impact is privilege elevation to SYSTEM with high confidentiality/inte...

Thales SafeNet Security Vulnerability

Thales SafeNet is an enterprise authentication, data encryption, and key management solution from Thales USA. A security vulnerability exists in Thales SafeNet Sentinel HASP LDK prior to version 9.16, which stems from a flaw in the installer that allows an attacker to upgrade privileges via local...