CVE-2024-2537

Improper Control of Dynamically-Managed Code Resources vulnerability in Logitech Logi Tune on MacOS allows Local Code Inclusion.

CVSS v3 4.4 MEDIUM

4.4^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.8 / Impact : 2.5

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://hackerone.com/reports/2376663	Permissions Required
https://hackerone.com/reports/2376663	Permissions Required

Configurations

Configuration 1 (hide)

cpe:2.3:a:logitech:logi_tune:-:*:*:*:*:macos:*:*

History

09 Apr 2025, 15:32

Type	Values Removed	Values Added
First Time		Logitech Logitech logi Tune
CPE		cpe:2.3:a:logitech:logi_tune:-:::::macos::
References	~~() https://hackerone.com/reports/2376663 -~~	() https://hackerone.com/reports/2376663 - Permissions Required

21 Nov 2024, 09:09

Type	Values Removed	Values Added
References	~~() https://hackerone.com/reports/2376663 -~~	() https://hackerone.com/reports/2376663 -

17 Mar 2024, 22:38

Type	Values Removed	Values Added
Summary		(es) La vulnerabilidad del control inadecuado de los recursos de código administrados dinámicamente en Logitech Logi Tune en MacOS permite la inclusión de código local.

15 Mar 2024, 18:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-03-15 18:15

Updated : 2025-04-09 15:32

NVD link : CVE-2024-2537

Mitre link : CVE-2024-2537

CVE.ORG link : CVE-2024-2537

JSON object : View

Products Affected

logitech

logi_tune

CWE

CWE-913

Improper Control of Dynamically-Managed Code Resources

{"id": "CVE-2024-2537", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "cve-coordination@logitech.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.4, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 2.5, "exploitabilityScore": 1.8}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2024-03-15T18:15:08.583", "references": [{"url": "https://hackerone.com/reports/2376663", "tags": ["Permissions Required"], "source": "cve-coordination@logitech.com"}, {"url": "https://hackerone.com/reports/2376663", "tags": ["Permissions Required"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "cve-coordination@logitech.com", "description": [{"lang": "en", "value": "CWE-913"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-913"}]}], "descriptions": [{"lang": "en", "value": "Improper Control of Dynamically-Managed Code Resources vulnerability in Logitech Logi Tune on MacOS allows Local Code Inclusion."}, {"lang": "es", "value": "La vulnerabilidad del control inadecuado de los recursos de c\u00f3digo administrados din\u00e1micamente en Logitech Logi Tune en MacOS permite la inclusi\u00f3n de c\u00f3digo local."}], "lastModified": "2025-04-09T15:32:40.037", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:logitech:logi_tune:-:*:*:*:*:macos:*:*", "vulnerable": true, "matchCriteriaId": "294AB122-9AB1-4CB3-B64F-D2748309D2A6"}], "operator": "OR"}]}], "sourceIdentifier": "cve-coordination@logitech.com"}