CVE-2023-31462

An issue was discovered in SteelSeries GG 36.0.0. An attacker can change values in an unencrypted database that is writable for all users on the computer, in order to trigger code execution with higher privileges.

CVSS v3.1

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

1.05% chance of exploitation in the next 30 days, 62th percentile

Published

2023-07-20

Updated

2024-10-28

Proof-of-concept exploits (1)

• https://www.akamai.com/blog/security-research/exploit-steelseries-subapp-privilege-escala…

References

• CVE Record
• NVD entry

Related

• CVE-2023-31461
• CVE-2023-31465
• CVE-2023-3146
• CVE-2023-31466
• CVE-2023-3145
• CVE-2023-31468