CVE-2024-31952

An issue was discovered in Samsung Magician 8.0.0 on macOS

Medium · published May 9, 2024

CVSS v3.1
6.7
EPSS
0%
Percentile
6.3
In the wild
Unconfirmed
What it is

An issue was discovered in Samsung Magician 8.0.0 on macOS. Because symlinks are used during the installation process, an attacker can escalate privileges via arbitrary file permission writes. (The attacker must already have user privileges, and an administrator password must be entered during the program installation stage for privilege escalation.)

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AC:H/AV:L/A:H/C:H/I:H/PR:L/S:U/UI:R
CVSS v4.0
Not supplied
EPSS
0.00172 · 6.3th percentile
Published
2024-05-09T17:38Z
EPSS history
Timeline
  • 09 MAY 17:38Z
    An issue was discovered in Samsung Magician 8.0.0 on macOS
    cvelistv5