Lucene search

K
nvd[email protected]NVD:CVE-2024-5760
HistorySep 11, 2024 - 4:15 p.m.

CVE-2024-5760

2024-09-1116:15:08
CWE-269
web.nvd.nist.gov
1
cve-2024-5760
escalation of privilege
reverse shell
application vulnerability
windows vulnerability
print driver vulnerability

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

9.6%

The Samsung Universal Print Driver for Windows is potentially vulnerable to escalation of privilege allowing the creation of a reverse shell in the tool. This is only applicable for products in the application released or manufactured before 2018.

Affected configurations

Nvd
Node
samsunguniversal_print_driverMatch3.00.16.0101
AND
microsoftwindowsMatch-
VendorProductVersionCPE
samsunguniversal_print_driver3.00.16.0101cpe:2.3:a:samsung:universal_print_driver:3.00.16.0101:*:*:*:*:*:*:*
microsoftwindows-cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

9.6%

Related for NVD:CVE-2024-5760