Vulnerability · Published May 9, 2024 · Assigned by mitre
CVE-2024-31953
Medium 6.7
In plain English
A medium-severity privilege mismanagement in the affected software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 4% of all known vulnerabilities).
Official description
An issue was discovered in Samsung Magician 8.0.0 on macOS. Because it is possible to tamper with the directory and executable files used during the installation process, an attacker can escalate privileges through arbitrary code execution. (The attacker must already have user privileges, and an administrator password must be entered during the program installation stage for privilege escalation.)
Affected products (as reported)
Weakness: CWE-269 · Vector: CVSS:3.1/AC:H/AV:L/A:H/C:H/I:H/PR:L/S:U/UI:R