CVE-2024-23769

Improper privilege control for the named pipe in Samsung Magician PC Software 8.0.0 (for Windows) allows a local attacker to read privileged data.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:samsung:magician:8.0.0:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

History

21 Nov 2024, 08:58

Type Values Removed Values Added
References () https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - Vendor Advisory () https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - Vendor Advisory
CVSS v2 : unknown
v3 : 5.5
v2 : unknown
v3 : 7.3

15 Feb 2024, 15:40

Type Values Removed Values Added
CPE cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:a:samsung:magician:8.0.0:*:*:*:*:*:*:*
Summary
  • (es) El control de privilegios inadecuado para la canalización con nombre en Samsung Magician PC Software 8.0.0 (para Windows) permite a un atacante local leer datos privilegiados.
CVSS v2 : unknown
v3 : 7.3
v2 : unknown
v3 : 5.5
CWE NVD-CWE-noinfo
References () https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - () https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - Vendor Advisory
First Time Samsung magician
Microsoft
Microsoft windows
Samsung

07 Feb 2024, 19:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-02-07 19:15

Updated : 2024-11-21 08:58


NVD link : CVE-2024-23769

Mitre link : CVE-2024-23769

CVE.ORG link : CVE-2024-23769


JSON object : View

Products Affected

samsung

  • magician

microsoft

  • windows