PT-2024-38751 · Logitech · Logitech Options

Ferdogan · Published 2024-08-25 · Updated 2024-09-11 · CVE-2024-8011

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions: Logitech Options+ versions prior to 1.72

Description: The issue allows a local attacker to inject a dynamic library within the Logitech Options+ runtime and abuse permissions granted by the user, such as access to the Camera. This can lead to compromised system security.

Recommendations: For Logitech Options+ versions prior to 1.72, upgrade to version 1.72 to mitigate the risks. As a temporary workaround, consider restricting access to sensitive features such as the Camera until the upgrade is applied.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2024-8011

Affected Products

Logitech Options

References · 11

• https://osv.dev/vulnerability/CVE-2024-8011 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-8011 · Security Note
• https://t.me/cvenotify/92076 · Telegram Post
• https://t.me/cvenotify/94245 · Telegram Post
• https://twitter.com/CVEnew/status/1827683655537344916 · Twitter Post
• https://hackerone.com · Note
• https://t.me/cvedetector/4088 · Telegram Post
• https://twitter.com/transilienceai/status/1829198154471756246 · Twitter Post
• https://twitter.com/FeCassie/status/1828115210999341092 · Twitter Post
• https://twitter.com/oktsec/status/1827695998958715325 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1827714450347925557 · Twitter Post