CVE-2023-47101

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2023-47101
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-47101.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-47101
Published
2023-10-30T18:15:10Z
Modified
2025-10-21T13:28:31.768192Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

The installer (aka openvpn-client-installer) in Securepoint SSL VPN Client before 2.0.40 allows local privilege escalation during installation or repair.

References

Affected packages

Git / github.com/securepoint/openvpn-client

Affected ranges

Type
GIT
Repo
https://github.com/securepoint/openvpn-client
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
48a56602d89766e9f54d87899e5f2eb2de3d6b91

Affected versions

1.*

1.0.2
1.0.3

2.*

2.0.15
2.0.16
2.0.17
2.0.18
2.0.20
2.0.21
2.0.22
2.0.23
2.0.24
2.0.25
2.0.26
2.0.27
2.0.28
2.0.29
2.0.30
2.0.30-release
2.0.31
2.0.32
2.0.33
2.0.34
2.0.35
2.0.36
2.0.37
2.0.38
2.0.39

Database specific

vanir_signatures

[
    {
        "source": "https://github.com/securepoint/openvpn-client/commit/48a56602d89766e9f54d87899e5f2eb2de3d6b91",
        "id": "CVE-2023-47101-23e51c0f",
        "deprecated": false,
        "signature_version": "v1",
        "target": {
            "function": "OpenVpn::setChallengeKey",
            "file": "service/openvpn.cpp"
        },
        "signature_type": "Function",
        "digest": {
            "length": 324.0,
            "function_hash": "128596494413506664586250805865646891635"
        }
    },
    {
        "source": "https://github.com/securepoint/openvpn-client/commit/48a56602d89766e9f54d87899e5f2eb2de3d6b91",
        "id": "CVE-2023-47101-33b62c94",
        "deprecated": false,
        "signature_version": "v1",
        "target": {
            "function": "OpenVpn::setPassword",
            "file": "service/openvpn.cpp"
        },
        "signature_type": "Function",
        "digest": {
            "length": 315.0,
            "function_hash": "260018912638565858737526134575538261442"
        }
    },
    {
        "source": "https://github.com/securepoint/openvpn-client/commit/48a56602d89766e9f54d87899e5f2eb2de3d6b91",
        "id": "CVE-2023-47101-39e42ffc",
        "deprecated": false,
        "signature_version": "v1",
        "target": {
            "file": "service/src/qtservice.cpp"
        },
        "signature_type": "Line",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "116858572688455251816851425543284621797",
                "336154327393285456955967298192521642482",
                "236064025926592455420942343240783482815",
                "74703289184599618859680939191870000998"
            ]
        }
    },
    {
        "source": "https://github.com/securepoint/openvpn-client/commit/48a56602d89766e9f54d87899e5f2eb2de3d6b91",
        "id": "CVE-2023-47101-54b0d70a",
        "deprecated": false,
        "signature_version": "v1",
        "target": {
            "function": "OpenVpn::setUsername",
            "file": "service/openvpn.cpp"
        },
        "signature_type": "Function",
        "digest": {
            "length": 402.0,
            "function_hash": "53605661383654751758022384062614381988"
        }
    },
    {
        "source": "https://github.com/securepoint/openvpn-client/commit/48a56602d89766e9f54d87899e5f2eb2de3d6b91",
        "id": "CVE-2023-47101-5cdd49ae",
        "deprecated": false,
        "signature_version": "v1",
        "target": {
            "function": "OpenVpn::setPrivateKey",
            "file": "service/openvpn.cpp"
        },
        "signature_type": "Function",
        "digest": {
            "length": 320.0,
            "function_hash": "295870982733194096205771244768273601175"
        }
    },
    {
        "source": "https://github.com/securepoint/openvpn-client/commit/48a56602d89766e9f54d87899e5f2eb2de3d6b91",
        "id": "CVE-2023-47101-665e4ebe",
        "deprecated": false,
        "signature_version": "v1",
        "target": {
            "function": "QtServiceBase::QtServiceBase",
            "file": "service/src/qtservice.cpp"
        },
        "signature_type": "Function",
        "digest": {
            "length": 772.0,
            "function_hash": "275477778187836432657525895082442345952"
        }
    },
    {
        "source": "https://github.com/securepoint/openvpn-client/commit/48a56602d89766e9f54d87899e5f2eb2de3d6b91",
        "id": "CVE-2023-47101-a7c47ed2",
        "deprecated": false,
        "signature_version": "v1",
        "target": {
            "file": "service/openvpn.cpp"
        },
        "signature_type": "Line",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "261149936362660634891096158178181460458",
                "143608439697195155273353088207358910400",
                "149401971187640376095979626884476803867",
                "216967164334288814726106222956435688021",
                "205311443253752772097719495591246060999",
                "56373065689035700245088028219679836528",
                "276464312954712146280889379321950318852",
                "338161699556908636216257740920349035034",
                "254953813464281937752148065239046481781",
                "256196114047322418617923137720168302364",
                "253788866361020440601179771939424354114",
                "9458083629401973631856387552346823565",
                "202409163434003715077944784758439817814",
                "256196114047322418617923137720168302364",
                "253788866361020440601179771939424354114",
                "9458083629401973631856387552346823565"
            ]
        }
    },
    {
        "source": "https://github.com/securepoint/openvpn-client/commit/48a56602d89766e9f54d87899e5f2eb2de3d6b91",
        "id": "CVE-2023-47101-ab193fcf",
        "deprecated": false,
        "signature_version": "v1",
        "target": {
            "file": "service/src/qtservice.h"
        },
        "signature_type": "Line",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "293963000734970464482827436787024722085",
                "161356161455929842223329602942457973811",
                "321545428247425408079873120832302377697",
                "81407878429053577500173147762689127317"
            ]
        }
    }
]