CVE-2022-0915CWE-367

Logitech Sync desktop application prior to 2.4.574 - TOCTOU during installation leads to privelege escalation

Medium · published April 12, 2022

CVSS v3.1
6.0
EPSS
0%
Percentile
6.7
In the wild
Unconfirmed
What it is

There is a Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability in Logitech Sync for Windows prior to 2.4.574. Successful exploitation of these vulnerabilities may escalate the permission to the system user.

The record
Technical detail
CVSS v3.1
6.0 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00175 · 6.7th percentile
Weakness
CWE-367 · Time-of-check Time-of-use (TOCTOU) Race Condition
Published
2022-04-12T18:35Z
EPSS history
Timeline
  • 12 APR 18:35Z
    Logitech Sync desktop application prior to 2.4.574 - TOCTOU during installation leads to privelege escalation
    cvelistv5