Lucene search

LogitechCVE-2024-2537

HistoryMar 15, 2024 - 6:15 p.m.

CVE-2024-2537

2024-03-1518:15:08

CWE-913

Logitech

web.nvd.nist.gov

cve-2024-2537

logitech logi tune

macos

vulnerability

local code inclusion

nvd

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

AI Score

Confidence

Low

EPSS

Percentile

9.0%

JSON

Improper Control of Dynamically-Managed Code Resources vulnerability in Logitech Logi Tune on MacOS allows Local Code Inclusion.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "MacOS"
    ],
    "product": "Logi Tune",
    "vendor": "Logitech",
    "versions": [
      {
        "status": "unaffected",
        "version": "3.5.249"
      }
    ]
  }
]

References

hackerone.com/reports/2376663

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

AI Score

Confidence

Low

EPSS

Percentile

9.0%

JSON

Related for CVE-2024-2537