CVE-2024-36071

medium

Description

Samsung Magician 8.0.0 on Windows allows an admin to escalate privileges by tampering with the directory and DLL files used during the installation process. This occurs because of an Untrusted Search Path.

References

https://semiconductor.samsung.com/support/quality-support/product-security-updates/

Details

Source: Mitre, NVD

Published: 2024-06-20

Updated: 2024-07-03

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 6.3

Vector: CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H

Severity: Medium