CVE-2023-31462

2023-07-2000:00:00

mitre

www.cve.org

vulnerability

steelseries gg

unencrypted database

code execution

9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.0%

JSON

An issue was discovered in SteelSeries GG 36.0.0. An attacker can change values in an unencrypted database that is writable for all users on the computer, in order to trigger code execution with higher privileges.

References

steelseries.com/gg

www.akamai.com/blog/security-research/exploit-steelseries-subapp-privilege-escalation