Thalesgroup records

17 published records for vendor thalesgroup.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 23.5%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

17 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2021-32928No exploit	The Sentinel LDK Run-Time Environment installer (Versions 7.6 and prior) adds a firewall rule named “Sentinel License Manager” that allows ithalesgroup · sentinel ldk run-time environment · CWE-459 Pre-auth	Critical9.8	—	1.2%	Jun 16, 2021
31Monitor	CVE-2024-0197Proof of concept	Privilege Escalation in Thales SafeNet Sentinel HASP LDKthalesgroup · sentinel hasp ldk · CWE-269 Local privilege escalation	High7.8	—	0.4%	Feb 27, 2024
31Monitor	CVE-2023-7016Proof of concept	Privilege Escalation in SafeNet Authentication Clientthalesgroup · safenet authentication client · CWE-269 Local privilege escalation	High7.8	—	0.3%	Feb 27, 2024
31Monitor	CVE-2021-42810No exploit	Safenet Authentication Service Remote Desktop Gateway prior to 2.0.3 may allow privilege escilation to authenticated usersthalesgroup · safenet authentication service remote desktop gateway · CWE-336 Local privilege escalation	High7.8	—	0.3%	Jan 19, 2022
31Monitor	CVE-2021-42809No exploit	The Sentinel Protection Installer 7.7.0 does not properly restrict loading Dynamic Link Librarythalesgroup · sentinel protection installer · CWE-913 RCE	High7.8	—	0.3%	Dec 20, 2021
31Monitor	CVE-2023-5993No exploit	Privilege Escalation in SafeNet Authentication Client Installerthalesgroup · safenet authentication client · CWE-269 Local privilege escalation	High7.8	—	0.1%	Feb 27, 2024
27Monitor	CVE-2026-6805No exploit	Vulnerability on Cryptobox external sharing featurethalesgroup · ercom cryptobox · CWE-280 Pre-auth	Medium6.9	—	0.2%	May 7, 2026
26Monitor	CVE-2021-28979No exploit	SafeNet KeySecure Management Console 8.12.0 is vulnerable to HTTP response splitting attacks.thalesgroup · safenet keysecure · CWE-74 Pre-auth	Medium6.5	—	1.1%	Jun 16, 2021
26Monitor	CVE-2021-42056Proof of concept	Thales Safenet Authentication Client (SAC) for Linux and Windows through 10.7.7 creates insecure temporary hid and lock files allowing a loclinux · linux kernel · CWE-59 RCE Local privilege escalation	Medium6.7	—	1.0%	Jun 24, 2022
26Monitor	CVE-2021-42138No exploit	A user of a machine protected by SafeNet Agent for Windows Logon may leverage weak entropy to access the encrypted credentials of any or allthalesgroup · safenet windows logon agent · CWE-331	Medium6.5	—	0.6%	Dec 20, 2021
26Monitor	CVE-2021-42811No exploit	Vulnerability in SafeNet KeySecurethalesgroup · safenet keysecure · CWE-22 Path traversal	Medium6.5	—	0.5%	Jun 10, 2022
26Monitor	CVE-2024-5264No exploit	Network Key Transfer with AES KHT vulnerability in Luna EFTthalesgroup · luna eft · CWE-338 Weak crypto	Medium6.5	—	0.3%	May 23, 2024
26Monitor	CVE-2021-42808No exploit	The Sentinel Protection Installer 7.7.0 creates files and directory with all privileges granting any user full permissions.thalesgroup · sentinel protection installer · CWE-284 Local privilege escalation Broken access control (IDOR)	Medium6.7	—	0.2%	Dec 20, 2021
25Monitor	CVE-2020-15858No exploit	Some devices of Thales DIS (formerly Gemalto, formerly Cinterion) allow Directory Traversal by physically proximate attackers.thalesgroup · bgs5 firmware · CWE-22 Path traversal	Medium6.4	—	0.7%	Aug 21, 2020
24Monitor	CVE-2022-1293No exploit	XSS vulnerability in Citadelthalesgroup · citadel · CWE-80 Pre-auth XSS	Medium6.1	—	0.4%	Aug 2, 2022
22Monitor	CVE-2023-2737No exploit	Improper securing of log directory may allow a denial of servicethalesgroup · safenet authentication service · CWE-276 Local privilege escalation Denial of service	Medium5.5	—	0.1%	Aug 16, 2023
18Monitor	CVE-2019-15809No exploit	Smart cards from the Athena SCS manufacturer, based on the Atmel Toolbox 00.03.11.05 and the AT90SC chip, contain a timing side channel in Emicrochip · atmel toolbox · CWE-203	Medium4.7	—	0.4%	Oct 3, 2019

CVE-2021-32928
39Monitor
The Sentinel LDK Run-Time Environment installer (Versions 7.6 and prior) adds a firewall rule named “Sentinel License Manager” that allows i
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
thalesgroup · sentinel ldk run-time environmentJun 16, 2021
CVE-2024-0197
31Monitor
Privilege Escalation in Thales SafeNet Sentinel HASP LDK
HighCVSS 7.8Proof of conceptEPSS 0%
- Local privilege escalation
thalesgroup · sentinel hasp ldkFeb 27, 2024
CVE-2023-7016
31Monitor
Privilege Escalation in SafeNet Authentication Client
HighCVSS 7.8Proof of conceptEPSS 0%
- Local privilege escalation
thalesgroup · safenet authentication clientFeb 27, 2024
CVE-2021-42810
31Monitor
Safenet Authentication Service Remote Desktop Gateway prior to 2.0.3 may allow privilege escilation to authenticated users
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
thalesgroup · safenet authentication service remote desktop gatewayJan 19, 2022
CVE-2021-42809
31Monitor
The Sentinel Protection Installer 7.7.0 does not properly restrict loading Dynamic Link Library
HighCVSS 7.8No exploitEPSS 0%
- RCE
thalesgroup · sentinel protection installerDec 20, 2021
CVE-2023-5993
31Monitor
Privilege Escalation in SafeNet Authentication Client Installer
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
thalesgroup · safenet authentication clientFeb 27, 2024
CVE-2026-6805
27Monitor
Vulnerability on Cryptobox external sharing feature
MediumCVSS 6.9No exploitEPSS 0%
- Pre-auth
thalesgroup · ercom cryptoboxMay 7, 2026
CVE-2021-28979
26Monitor
SafeNet KeySecure Management Console 8.12.0 is vulnerable to HTTP response splitting attacks.
MediumCVSS 6.5No exploitEPSS 1%
- Pre-auth
thalesgroup · safenet keysecureJun 16, 2021
CVE-2021-42056
26Monitor
Thales Safenet Authentication Client (SAC) for Linux and Windows through 10.7.7 creates insecure temporary hid and lock files allowing a loc
MediumCVSS 6.7Proof of conceptEPSS 1%
- RCE
- Local privilege escalation
linux · linux kernelJun 24, 2022
CVE-2021-42138
26Monitor
A user of a machine protected by SafeNet Agent for Windows Logon may leverage weak entropy to access the encrypted credentials of any or all
MediumCVSS 6.5No exploitEPSS 0%
thalesgroup · safenet windows logon agentDec 20, 2021
CVE-2021-42811
26Monitor
Vulnerability in SafeNet KeySecure
MediumCVSS 6.5No exploitEPSS 0%
- Path traversal
thalesgroup · safenet keysecureJun 10, 2022
CVE-2024-5264
26Monitor
Network Key Transfer with AES KHT vulnerability in Luna EFT
MediumCVSS 6.5No exploitEPSS 0%
- Weak crypto
thalesgroup · luna eftMay 23, 2024
CVE-2021-42808
26Monitor
The Sentinel Protection Installer 7.7.0 creates files and directory with all privileges granting any user full permissions.
MediumCVSS 6.7No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
thalesgroup · sentinel protection installerDec 20, 2021
CVE-2020-15858
25Monitor
Some devices of Thales DIS (formerly Gemalto, formerly Cinterion) allow Directory Traversal by physically proximate attackers.
MediumCVSS 6.4No exploitEPSS 0%
- Path traversal
thalesgroup · bgs5 firmwareAug 21, 2020
CVE-2022-1293
24Monitor
XSS vulnerability in Citadel
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
thalesgroup · citadelAug 2, 2022
CVE-2023-2737
22Monitor
Improper securing of log directory may allow a denial of service
MediumCVSS 5.5No exploitEPSS 0%
- Local privilege escalation
- Denial of service
thalesgroup · safenet authentication serviceAug 16, 2023
CVE-2019-15809
18Monitor
Smart cards from the Athena SCS manufacturer, based on the Atmel Toolbox 00.03.11.05 and the AT90SC chip, contain a timing side channel in E
MediumCVSS 4.7No exploitEPSS 0%
microchip · atmel toolboxOct 3, 2019