CVEvulnerability
CVE-2024-8258
2.0 LOW
Official page ↗
- Status
- Analyzed
- Published
- 2024-09-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 4.0 ([email protected])
- 2.0 LOW — CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:X/RE:X/U:X
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-94
Description
Improper Control of Generation of Code ('Code Injection') in Electron Fuses in Logitech Options Plus version 1.60.496306 on macOS allows attackers to execute arbitrary code via insecure Electron Fuses configuration.
Affected configurations
• logitech logi options\+ (>= 1.60.496306 < 1.70.551909)
Related
Weakness · CWE (1)
- CWE-94 Improper Control of Generation of Code weakness
References
- https://github.com/r3ggi/electroniz3r Exploit, Third Party Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-49314 Not Applicable
- https://nvd.nist.gov/vuln/detail/CVE-2023-50643 Not Applicable
- https://www.electronjs.org/docs/latest/tutorial/fuses Product