CVE-2023-31462 in SteelSeries

Resumen

por MITRE • 2023-07-20

An issue was discovered in SteelSeries GG 36.0.0. An attacker can change values in an unencrypted database that is writable for all users on the computer, in order to trigger code execution with higher privileges.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Reservar: 2023-04-28
• Divulgación: 2023-07-20
• Moderación: aceptado
• Artículo: VDB-235097
• CPE: listo
• CWE: CWE-284 (confirmado)
• Explotación: Descargar
• CVSS: 8.8 (NVD)
• EPSS: 0.01056
• KEV: no
• Actividades: muy bajo

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-31462
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-31462
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-31462/