Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-45752

Опубликовано: 19 сент. 2024
Источник: nvd
CVSS3: 8.5
CVSS3: 7.3
EPSS Низкий

Описание

logiops through 0.3.4, in its default configuration, allows any unprivileged user to configure its logid daemon via an unrestricted D-Bus service, including setting malicious keyboard macros. This allows for privilege escalation with minimal user interaction.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:pixlone:logiops:*:*:*:*:*:*:*:*
Версия до 0.3.4 (включая)

EPSS

Процентиль: 5%
0.00021
Низкий

8.5 High

CVSS3

7.3 High

CVSS3

Дефекты

NVD-CWE-noinfo
CWE-269

Связанные уязвимости

CVSS3: 8.5
ubuntu
больше 1 года назад

logiops through 0.3.4, in its default configuration, allows any unprivileged user to configure its logid daemon via an unrestricted D-Bus service, including setting malicious keyboard macros. This allows for privilege escalation with minimal user interaction.

CVSS3: 8.5
debian
больше 1 года назад

logiops through 0.3.4, in its default configuration, allows any unpriv ...

CVSS3: 8.5
github
больше 1 года назад

logiops through 0.3.4, in its default configuration, allows any unprivileged user to configure its logid daemon via an unrestricted D-Bus service, including setting malicious keyboard macros. This allows for privilege escalation with minimal user interaction.

EPSS

Процентиль: 5%
0.00021
Низкий

8.5 High

CVSS3

7.3 High

CVSS3

Дефекты

NVD-CWE-noinfo
CWE-269