Lucene search

K
vulnrichmentLogitechVULNRICHMENT:CVE-2024-8011
HistoryAug 25, 2024 - 11:44 a.m.

CVE-2024-8011

2024-08-2511:44:45
CWE-863
Logitech
github.com
2
logitech options+
macos
security vulnerability
dynamic library
local attacker
abuse permissions
camera

CVSS4

2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/SC:L/VI:L/SI:L/VA:L/SA:L

AI Score

6.6

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Logitech Options+ on MacOS prior 1.72 allows a local attacker to inject dynamic library within Options+ runtime and abuse permissions granted by the user to Options+ such as Camera.

CVSS4

2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/SC:L/VI:L/SI:L/VA:L/SA:L

AI Score

6.6

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2024-8011