8.8

CVE-2023-31462

Exploit
An issue was discovered in SteelSeries GG 36.0.0. An attacker can change values in an unencrypted database that is writable for all users on the computer, in order to trigger code execution with higher privileges.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Steelseries ≫ Gg Version36.0.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.92% 0.555
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-276 Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.

https://steelseries.com/gg
Product
https://www.akamai.com/blog/security-research/exploit-steelseries-subapp-privilege-escalation
Third Party Advisory
Exploit