CVE-2023-31462

Published Jul 20, 2023

Last updated 4 months ago

Overview

Description: An issue was discovered in SteelSeries GG 36.0.0. An attacker can change values in an unencrypted database that is writable for all users on the computer, in order to trigger code execution with higher privileges.
Source: cve@mitre.org
NVD status: Modified

Risk scores

CVSS 3.1

Type: Primary
Base score: 8.8
Impact score: 5.9
Exploitability score: 2.8
Vector string: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity: HIGH

Weaknesses

nvd@nist.gov: NVD-CWE-noinfo
134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-276

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:steelseries:gg:36.0.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DE8875F6-428E-43E7-AE6B-3CAE4FA03780"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References