CVE-2024-8258 Vulnerability Details

  /     /     /  

CVE-2024-8258 Metadata Quick Info

CVE Published: 10/09/2024 | CVE Updated: 10/09/2024 | CVE Year: 2024
Source: Logitech | Vendor: Logitech | Product: Logitech Options Plus
Status : PUBLISHED

---

CVE-2024-8258 Description

Improper Control of Generation of Code (\'Code Injection\') in Electron Fuses in Logitech Options Plus version 1.60.496306 on macOS allows attackers to execute arbitrary code via insecure Electron Fuses configuration.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-94
CWE Name: CWE-94 Improper Control of Generation of Code ( Code Injection )
Source: Logitech

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID: CAPEC-242
CAPEC Description: CAPEC-242 Code Injection


Source: NVD (National Vulnerability Database).