CVE-2024-31953

MEDIUM

Samsung Magician 8.0.0 - Privilege Escalation

Title source: llm
STIX 2.1

Description

An issue was discovered in Samsung Magician 8.0.0 on macOS. Because it is possible to tamper with the directory and executable files used during the installation process, an attacker can escalate privileges through arbitrary code execution. (The attacker must already have user privileges, and an administrator password must be entered during the program installation stage for privilege escalation.)

Scores

CVSS v3 6.7
EPSS 0.0022
EPSS Percentile 44.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-269
Status published
Products (1)
samsung/magician 8.0.0
Published May 14, 2024
Tracked Since Feb 18, 2026