CVE-2023-31462
Last modified
CVE-2023-31462 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. An issue was discovered in SteelSeries GG 36.0.0. An attacker can change values in an unencrypted database that is writable for all users on the computer, in order to trigger code execution with higher privileges.. EPSS estimates a 0.92% chance of exploitation in the next 30 days.
Description
An issue was discovered in SteelSeries GG 36.0.0. An attacker can change values in an unencrypted database that is writable for all users on the computer, in order to trigger code execution with higher privileges.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Steelseries | Gg | 36.0.0 |
References
- https://steelseries.com/ggProduct
- https://www.akamai.com/blog/security-research/exploit-steelseries-subapp-privilege-escalationExploit, Third Party Advisory
- https://steelseries.com/ggProduct
- https://www.akamai.com/blog/security-research/exploit-steelseries-subapp-privilege-escalationExploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-31462?
How severe is CVE-2023-31462?
How do I fix CVE-2023-31462?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-31457A vulnerability in the Headquarters server component of Mite…9.8
- CVE-2023-31458A vulnerability in the Edge Gateway component of Mitel MiVoi…9.8
- CVE-2023-31459A vulnerability in the Connect Mobility Router component of …8.8
- CVE-2023-3146A vulnerability, which was classified as critical, was found…8.8
- CVE-2023-31460A vulnerability in the Connect Mobility Router component of …7.2
- CVE-2023-31461Attackers can exploit an open API listener on SteelSeries GG…7.5
- CVE-2023-31465An issue was discovered in FSMLabs TimeKeeper 8.0.17 through…9.8
- CVE-2023-31466An XSS issue was discovered in FSMLabs TimeKeeper 8.0.17. On…5.4
- CVE-2023-31468An issue was discovered in Inosoft VisiWin 7 through 2022-2.…7.8
- CVE-2023-31469 A REST interface in Apache StreamPipes (versions 0.69.0 to …8.8
- CVE-2023-3147A vulnerability has been found in SourceCodester Online Disc…8.8
- CVE-2023-31470SmartDNS through 41 before 56d0332 allows an out-of-bounds w…9.8
Are you affected by CVE-2023-31462?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST