Vulnerability · Published Sep 10, 2024 · Assigned by Logitech
CVE-2024-8258Insecure Electron Fuses in Logitech Options Plus Allowing Arbitrary Code Execution on macOS
Low 2.0
In plain English
A low-severity code injection in Logitech Options Plus from Logitech. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 34% of all known vulnerabilities).
Severity (CVSS 4.0)2.0Low
Exploit odds (30 days)0.4%top 66.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
Improper Control of Generation of Code ('Code Injection') in Electron Fuses in Logitech Options Plus version 1.60.496306 on macOS allows attackers to execute arbitrary code via insecure Electron Fuses configuration.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Logitech | Logitech Options Plus | 1.60.496306 – before 1.70 |
Weakness: CWE-94 · Vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:L/SA:L/AU:Y/R:U