Code injection

2023-07-2018:15:00

PRIOn knowledge base

www.prio-n.com

steelseries

code execution

database

vulnerability

unencrypted

writable

higher privileges

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.0%

JSON

An issue was discovered in SteelSeries GG 36.0.0. An attacker can change values in an unencrypted database that is writable for all users on the computer, in order to trigger code execution with higher privileges.

CPENameOperatorVersion
ggeq36.0.0

CPE	Name	Operator	Version
	gg	eq	36.0.0

References

steelseries.com/gg

www.akamai.com/blog/security-research/exploit-steelseries-subapp-privilege-escalation