CVEvulnerability

CVE-2024-31953

6.7 MEDIUM Published 2024-05-14 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-05-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-269

Description

An issue was discovered in Samsung Magician 8.0.0 on macOS. Because it is possible to tamper with the directory and executable files used during the installation process, an attacker can escalate privileges through arbitrary code execution. (The attacker must already have user privileges, and an administrator password must be entered during the program installation stage for privilege escalation.)

Affected configurations

• samsung magician 8.0.0

Related

Weakness · CWE (1)

  • CWE-269 Improper Privilege Management weakness

References