Lucene search

K
nvd[email protected]NVD:CVE-2024-8011
HistoryAug 25, 2024 - 12:15 p.m.

CVE-2024-8011

2024-08-2512:15:03
CWE-863
web.nvd.nist.gov
4
logitech options+ macos vulnerability
local attacker
dynamic library injection
user permissions abuse
camera permission

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS

0

Percentile

9.5%

Logitech Options+ on MacOS prior 1.72 allows a local attacker to inject dynamic library within Options+ runtime and abuse permissions granted by the user to Options+ such as Camera.

Affected configurations

Nvd
Node
logitechoptions\+Range<1.72macos
VendorProductVersionCPE
logitechoptions\+*cpe:2.3:a:logitech:options\+:*:*:*:*:*:macos:*:*

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS

0

Percentile

9.5%

Related for NVD:CVE-2024-8011