CVE-2023-31462: Incorrect Default Permissions

An issue was discovered in SteelSeries GG 36.0.0. An attacker can change values in an unencrypted database that is writable for all users on the computer, in order to trigger code execution with higher privileges...

CVE-2023-31461

CVE-2023-31461 is a path-traversal vulnerability in SteelSeries GG (version 36.0.0) with an open API listener that can be abused to create a sub-application execute automatically from a controlled location. Affected product: SteelSeries GG 36.0.0. Root cause: path traversal via the open API liste...

PT-2023-23344 · Steelseries · Steelseries Gg

Name of the Vulnerable Software and Affected Versions: SteelSeries GG version 36.0.0 Description: An issue allows an attacker to change values in an unencrypted database that is writable for all users on the computer. This can trigger code execution with higher privileges. Recommendations: For...

CVE-2023-31461

Attackers can exploit an open API listener on SteelSeries GG 36.0.0 to create a sub-application that will be executed automatically from a controlled location, because of a path traversal vulnerability...

CVE-2023-31461: Improper Limitation of a Pathname to a Restricted Directory

Attackers can exploit an open API listener on SteelSeries GG 36.0.0 to create a sub-application that will be executed automatically from a controlled location, because of a path traversal vulnerability...

CVE-2023-31462

CVE-2023-31462 affects SteelSeries GG 36.0.0. The issue arises from an unencrypted database that is writable by all users on the host, enabling an attacker to change values and trigger code execution with higher privileges. The available documents confirm the affected software/version and the und...

CVE-2023-31462

An issue was discovered in SteelSeries GG 36.0.0. An attacker can change values in an unencrypted database that is writable for all users on the computer, in order to trigger code execution with higher privileges...

CVE-2023-31461

Attackers can exploit an open API listener on SteelSeries GG 36.0.0 to create a sub-application that will be executed automatically from a controlled location, because of a path traversal vulnerability...

Exploiting SteelSeries' Subapplication Mechanism for Privilege Escalation

...

SUSE CVE-2013-2891

drivers/hid/hid-steelseries.c in the Human Interface Device HID subsystem in the Linux kernel through 3.11, when CONFIGHIDSTEELSERIES is enabled, allows physically proximate attackers to cause a denial of service heap-based out-of-bounds write via a crafted device...

Win10 Admin Rights Tossed Off by Yet Another Plug-In

It’s not just Razer’s mice and keyboards that gobble up Windows 10’s tip-top, admin-level SYSTEM privileges: A SteelSeries bug also tosses off Windows 10 admin rights if you just plug in a device. … Or, then again, you can save yourself some cash by simply tricking an Android phone into thinking ...

Mice “taking over the world!”, one Windows machine at a time

Famously, Pinky and the Brain were a pair of animated mice that wanted to take over the world. Of course they never succeed, but maybe they just set their sights too high. Because while mice may not be taking over the world yet, they are taking over computers. In the last week, security researche...

faq.steelseries.com XSS vulnerability

Vulnerable URL: http://faq.steelseries.com/admin/de/colormenu.php?sp=f%22;alert%28%27XSSPOSED%27%29;a=%22 Details: Description| Value ---|--- Patched:| Yes, at 07.10.2016 Latest check for patch:| 07.10.2016 16:33 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

DEBIAN-CVE-2013-2891

drivers/hid/hid-steelseries.c in the Human Interface Device HID subsystem in the Linux kernel through 3.11, when CONFIGHIDSTEELSERIES is enabled, allows physically proximate attackers to cause a denial of service heap-based out-of-bounds write via a crafted device...

UBUNTU-CVE-2013-2891

drivers/hid/hid-steelseries.c in the Human Interface Device HID subsystem in the Linux kernel through 3.11, when CONFIGHIDSTEELSERIES is enabled, allows physically proximate attackers to cause a denial of service heap-based out-of-bounds write via a crafted device...

CVE-2013-2891

drivers/hid/hid-steelseries.c in the Human Interface Device HID subsystem in the Linux kernel through 3.11, when CONFIGHIDSTEELSERIES is enabled, allows physically proximate attackers to cause a denial of service heap-based out-of-bounds write via a crafted device...

PT-2013-4010

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.12 Description The issue allows physically proximate attackers to cause a denial of service via a crafted device, specifically through a heap-based out-of-bounds write in the Human Interface Device HID subsyste...