CVE-2024-31954

CVSS 7.3 HIGHEPSS 0.2%CWE-538

Vexday Risk Score

21Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 7.3EPSS 0.2%KEV nãoPoC —Patch —

Ciclo de vida

09 may 2024Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

An issue was discovered in the installer in Samsung Portable SSD for T5 1.6.10 on Windows. Because it is possible to tamper with the directory and DLL files used during the installation process, an attacker can escalate privileges through arbitrary code execution. (An attacker must already have user privileges)

CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:L/S:U/UI:R

Productos afectados

n/a · n/a

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-31954/