CVE-2024-31953

{"id": "CVE-2024-31953", "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "cve@mitre.org", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.7, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 0.8}]}, "published": "2024-05-14T15:27:50.960", "references": [{"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-31953/", "source": "cve@mitre.org"}, {"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-31953/", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-269"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered in Samsung Magician 8.0.0 on macOS. Because it is possible to tamper with the directory and executable files used during the installation process, an attacker can escalate privileges through arbitrary code execution. (The attacker must already have user privileges, and an administrator password must be entered during the program installation stage for privilege escalation.)"}, {"lang": "es", "value": "Se descubri\u00f3 un problema en Samsung Magician 8.0.0 en macOS. Debido a que es posible alterar el directorio y los archivos ejecutables utilizados durante el proceso de instalaci\u00f3n, un atacante puede aumentar los privilegios mediante la ejecuci\u00f3n de c\u00f3digo arbitrario. (El atacante ya debe tener privilegios de usuario y se debe ingresar una contrase\u00f1a de administrador durante la etapa de instalaci\u00f3n del programa para escalar privilegios)."}], "lastModified": "2024-11-21T09:14:11.860", "sourceIdentifier": "cve@mitre.org"}