CVE-2024-8258

CVSS V2 None CVSS V3 None
Description
Improper Control of Generation of Code ('Code Injection') in Electron Fuses in Logitech Options Plus version 1.60.496306 on macOS allows attackers to execute arbitrary code via insecure Electron Fuses configuration.
Overview
  • CVE ID
  • CVE-2024-8258
  • Assigner
  • Logitech
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2024-09-10T08:36:34.326Z
  • Last Modified Date
  • 2024-09-10T13:56:50.325Z
Weakness Enumerations
CWE URL
CWE-94 http://cwe.mitre.org/data/definitions/94.html
References
Reference URL Reference Tags
https://www.electronjs.org/docs/latest/tutorial/fuses
https://nvd.nist.gov/vuln/detail/CVE-2023-50643
https://nvd.nist.gov/vuln/detail/CVE-2023-49314
https://github.com/r3ggi/electroniz3r
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2024-8258
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-8258
History
Created Old Value New Value Data Type Notes
2024-09-11 13:06:33 Added to TrackCVE