CVE-2024-22002

HIGH

CORSAIR iCUE <5.9.105 - Code Injection

Title source: llm
STIX 2.1

Description

CORSAIR iCUE 5.9.105 with iCUE Murals on Windows allows unprivileged users to insert DLL files in the cuepkg-1.2.6 subdirectory of the installation directory.

Exploits (1)

nomisec WORKING POC
by 0xkickit · poc
https://github.com/0xkickit/iCUE_DllHijack_LPE-CVE-2024-22002

Scores

CVSS v3 7.8
EPSS 0.0237
EPSS Percentile 85.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-200
Status published
Published Jun 18, 2024
Tracked Since Feb 18, 2026