NA

CVE-2024-0197

Published: 27/02/2024 Updated: 27/02/2024

Vulnerability Summary

A flaw in the installer for Thales SafeNet Sentinel HASP LDK before 9.16 on Windows allows an malicious user to escalate their privilege level via local access.

Github Repositories

Proof of concept for Local Privilege Escalation in Thales Sentinel HASP LDK.

CVE-2024-0197-POC Proof of concept for Local Privilege Escalation in Thales Sentinel HASP LDK I initially wanted to develop one, but eventually that turned out to be unnecessary There is no race condition to win, and a simple DLL search order hijacking from a known location suffices to attain SYSTEM We simply: compile rawcpp as fltlibdll and put it into AppData\Local\Temp