An issue was discovered in SteelSeries GG 36.0.0. An attacker can change values in an unencrypted database that is writable for all users on the computer, in order to trigger code execution with higher privileges.
References
| Link | Resource |
|---|---|
| https://steelseries.com/gg | Product |
| https://www.akamai.com/blog/security-research/exploit-steelseries-subapp-privilege-escalation | Exploit Third Party Advisory |
Configurations
History
28 Oct 2024, 18:35
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-276 |
31 Jul 2023, 18:43
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
| First Time |
Steelseries
Steelseries gg |
|
| References | (MISC) https://steelseries.com/gg - Product | |
| References | (MISC) https://www.akamai.com/blog/security-research/exploit-steelseries-subapp-privilege-escalation - Exploit, Third Party Advisory | |
| CWE | NVD-CWE-noinfo | |
| CPE | cpe:2.3:a:steelseries:gg:36.0.0:*:*:*:*:*:*:* |
20 Jul 2023, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-07-20 18:15
Updated : 2024-10-28 18:35
NVD link : CVE-2023-31462
Mitre link : CVE-2023-31462
CVE.ORG link : CVE-2023-31462
JSON object : View
Products Affected
steelseries
- gg
CWE