Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-45752

Опубликовано: 19 сент. 2024
Источник: nvd
CVSS3: 8.5
CVSS3: 7.3
EPSS Низкий

Описание

logiops through 0.3.4, in its default configuration, allows any unprivileged user to configure its logid daemon via an unrestricted D-Bus service, including setting malicious keyboard macros. This allows for privilege escalation with minimal user interaction.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:pixlone:logiops:*:*:*:*:*:*:*:*
Версия до 0.3.4 (включая)

EPSS

Процентиль: 19%
0.00265
Низкий

8.5 High

CVSS3

7.3 High

CVSS3

Дефекты

NVD-CWE-noinfo
CWE-269

Связанные уязвимости

CVSS3: 8.5
ubuntu
около 2 лет назад

logiops through 0.3.4, in its default configuration, allows any unprivileged user to configure its logid daemon via an unrestricted D-Bus service, including setting malicious keyboard macros. This allows for privilege escalation with minimal user interaction.

CVSS3: 8.5
debian
около 2 лет назад

logiops through 0.3.4, in its default configuration, allows any unpriv ...

CVSS3: 8.5
github
около 2 лет назад

logiops through 0.3.4, in its default configuration, allows any unprivileged user to configure its logid daemon via an unrestricted D-Bus service, including setting malicious keyboard macros. This allows for privilege escalation with minimal user interaction.

EPSS

Процентиль: 19%
0.00265
Низкий

8.5 High

CVSS3

7.3 High

CVSS3

Дефекты

NVD-CWE-noinfo
CWE-269