Description (CNA)
Improper Control of Generation of Code ('Code Injection') in Electron Fuses in Logitech Options Plus version 1.60.496306 on macOS allows attackers to execute arbitrary code via insecure Electron Fuses configuration.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Logitech / Logitech Options Plus | affected 1.60.496306 before 1.70; unaffected 1.70 |
CWE
CWE-94
References
- https://www.electronjs.org/docs/latest/tutorial/fuses
- https://nvd.nist.gov/vuln/detail/CVE-2023-50643
- https://nvd.nist.gov/vuln/detail/CVE-2023-49314
- https://github.com/r3ggi/electroniz3r
ADP enrichment
No English description supplied.
No references supplied.