exploitDog

CVE-2024-8258

Опубликовано: 10 сент. 2024

Источник: nvd

CVSS3: 7.8

EPSS Низкий

Описание

Improper Control of Generation of Code ('Code Injection') in Electron Fuses in Logitech Options Plus version 1.60.496306 on macOS allows attackers to execute arbitrary code via insecure Electron Fuses configuration.

Ссылки

https://github.com/r3ggi/electroniz3r
Exploit
Third Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-49314
Not Applicable
https://nvd.nist.gov/vuln/detail/CVE-2023-50643
Not Applicable
https://www.electronjs.org/docs/latest/tutorial/fuses
Product

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:logitech:logi_options\+:*:*:*:*:*:*:*:*

Версия от 1.60.496306 (включая) до 1.70.551909 (исключая)

cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*

EPSS

Процентиль: 37%

0.00156

Низкий

7.8 High

CVSS3

Дефекты

CWE-94

CWE-94

Связанные уязвимости

GHSA-5hm7-x82q-99rh

CVSS3: 7.8

github

больше 1 года назад

Improper Control of Generation of Code ('Code Injection') in Electron Fuses in Logitech Options Plus version 1.60.496306 on macOS allows attackers to execute arbitrary code via insecure Electron Fuses configuration.

EPSS

Процентиль: 37%

0.00156

Низкий

7.8 High

CVSS3

Дефекты

CWE-94

CWE-94