{"id":"CVE-2023-47101","details":"The installer (aka openvpn-client-installer) in Securepoint SSL VPN Client before 2.0.40 allows local privilege escalation during installation or repair.","modified":"2026-08-12T14:51:28.277802Z","published":"2023-10-30T00:00:00Z","database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/47xxx/CVE-2023-47101.json","unresolved_ranges":[{"extracted_events":[{"fixed":"2.0.40"}],"source":"DESCRIPTION"}]},"references":[{"type":"WEB","url":"https://sourceforge.net/p/securepoint/news/2023/08/2040-is-now-available/"},{"type":"ADVISORY","url":"https://cyvisory.group/advisory/CYADV-2023-012"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/47xxx/CVE-2023-47101.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-47101"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/securepoint/openvpn-client","events":[{"introduced":"0"},{"fixed":"48a56602d89766e9f54d87899e5f2eb2de3d6b91"}],"database_specific":{"cpe":"cpe:2.3:a:securepoint:openvpn-client:*:*:*:*:*:windows:*:*","extracted_events":[{"introduced":"0"},{"fixed":"2.0.40"}],"source":"CPE_RANGE"}}],"versions":["2.0.39","2.0.38","2.0.37","2.0.36","2.0.35","2.0.34","2.0.33","2.0.32","2.0.31","2.0.30-release","2.0.30","2.0.29","2.0.28","2.0.27","2.0.26","2.0.25","2.0.24","2.0.23","2.0.22","2.0.20","2.0.18","2.0.17","2.0.16","2.0.15","1.0.3","1.0.2"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-47101.json","vanir_signatures_modified":"2026-08-12T14:51:28Z","vanir_signatures":[{"target":{"file":"service/openvpn.cpp","function":"OpenVpn::setChallengeKey"},"deprecated":false,"digest":{"function_hash":"128596494413506664586250805865646891635","length":324},"id":"CVE-2023-47101-23e51c0f","signature_type":"Function","signature_version":"v1","source":"https://github.com/securepoint/openvpn-client/commit/48a56602d89766e9f54d87899e5f2eb2de3d6b91"},{"digest":{"length":315,"function_hash":"260018912638565858737526134575538261442"},"id":"CVE-2023-47101-33b62c94","signature_type":"Function","signature_version":"v1","source":"https://github.com/securepoint/openvpn-client/commit/48a56602d89766e9f54d87899e5f2eb2de3d6b91","target":{"file":"service/openvpn.cpp","function":"OpenVpn::setPassword"},"deprecated":false},{"target":{"file":"service/src/qtservice.cpp"},"deprecated":false,"digest":{"line_hashes":["116858572688455251816851425543284621797","336154327393285456955967298192521642482","236064025926592455420942343240783482815","74703289184599618859680939191870000998"],"threshold":0.9},"id":"CVE-2023-47101-39e42ffc","signature_type":"Line","signature_version":"v1","source":"https://github.com/securepoint/openvpn-client/commit/48a56602d89766e9f54d87899e5f2eb2de3d6b91"},{"deprecated":false,"digest":{"function_hash":"53605661383654751758022384062614381988","length":402},"id":"CVE-2023-47101-54b0d70a","signature_type":"Function","signature_version":"v1","source":"https://github.com/securepoint/openvpn-client/commit/48a56602d89766e9f54d87899e5f2eb2de3d6b91","target":{"function":"OpenVpn::setUsername","file":"service/openvpn.cpp"}},{"digest":{"function_hash":"295870982733194096205771244768273601175","length":320},"id":"CVE-2023-47101-5cdd49ae","signature_type":"Function","signature_version":"v1","source":"https://github.com/securepoint/openvpn-client/commit/48a56602d89766e9f54d87899e5f2eb2de3d6b91","target":{"file":"service/openvpn.cpp","function":"OpenVpn::setPrivateKey"},"deprecated":false},{"id":"CVE-2023-47101-665e4ebe","signature_type":"Function","signature_version":"v1","source":"https://github.com/securepoint/openvpn-client/commit/48a56602d89766e9f54d87899e5f2eb2de3d6b91","target":{"file":"service/src/qtservice.cpp","function":"QtServiceBase::QtServiceBase"},"deprecated":false,"digest":{"function_hash":"275477778187836432657525895082442345952","length":772}},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/securepoint/openvpn-client/commit/48a56602d89766e9f54d87899e5f2eb2de3d6b91","target":{"file":"service/openvpn.cpp"},"deprecated":false,"digest":{"line_hashes":["261149936362660634891096158178181460458","143608439697195155273353088207358910400","149401971187640376095979626884476803867","216967164334288814726106222956435688021","205311443253752772097719495591246060999","56373065689035700245088028219679836528","276464312954712146280889379321950318852","338161699556908636216257740920349035034","254953813464281937752148065239046481781","256196114047322418617923137720168302364","253788866361020440601179771939424354114","9458083629401973631856387552346823565","202409163434003715077944784758439817814","256196114047322418617923137720168302364","253788866361020440601179771939424354114","9458083629401973631856387552346823565"],"threshold":0.9},"id":"CVE-2023-47101-a7c47ed2"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/securepoint/openvpn-client/commit/48a56602d89766e9f54d87899e5f2eb2de3d6b91","target":{"file":"service/src/qtservice.h"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["293963000734970464482827436787024722085","161356161455929842223329602942457973811","321545428247425408079873120832302377697","81407878429053577500173147762689127317"]},"id":"CVE-2023-47101-ab193fcf"}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}